Microsoft Copilot Personal CoSnitch Vulnerability Exposed: One-Click Data Leak Chain Patched
Varonis Threat Labs discovered CVE-2026-24301, codenamed CoSnitch, in Microsoft Copilot Personal, enabling attackers to exfiltrate victims' Gmail, Google Drive, Calendar, and OneDrive data with a single click on a malicious link. Microsoft completed the patch on August 18, 2026.