Researchers asked Microsoft Copilot how to hack it.
Copilot told them.
Not by accident. It disclosed an undocumented URL parameter that bypasses every guardrail Microsoft built. One click on a crafted link. Zero user confirmation. Full session access.
The attack is called CoSnitch. CVE-2026-24301...
Live Feed
Enterprise AI Impact
How AI is reshaping enterprises — layoffs, breaches, budgets, and who is winning.
Enterprise AI Impact — filtered for signal, not noise
The AI briefing CTOs read before their morning meeting
3 minutes. Zero fluff. Only what moves the needle.
$5/mo — your cheapest competitive edge
Topics
Feed
Advertisement
Start a Discussion