Researchers manipulated Microsoft Copilot Personal into telling them how to hack the AI assistant – eventually tricking it into sending sensitive data to an external server and poisoning its persistent memory,by repeatedly asking Copilot why an attack wouldnt work. Varonis Threat Labs uncovered the vulnerability, which they named CoSnitch and reported to Microsoft in December 2025. Redmond, were told, planned to issue a patch and formally identify the CVE on Tuesday. In research shared in...
