Related Threat Clusters
-
RovoBlast Vulnerability Exposes Enterprise Data via One-Click Attack
Atlassian's Rovo AI assistant was found vulnerable to a one-click prompt injection attack, dubbed RovoBlast, which allows attackers to inject malicious instructions into authenticated user sessions. This vulnerability…
4 articles · Updated August 10, 2026 -
Critical SearchLeak Vulnerability in Microsoft 365 Copilot Exposes Sensitive Data
A newly disclosed vulnerability in Microsoft 365 Copilot Enterprise, named SearchLeak (CVE-2026-42824), allows attackers to exfiltrate sensitive data with a single click on a crafted link. Discovered by Varonis Threat…
34 articles · Updated June 15, 2026 -
CoSnitch Attack Exposes Microsoft Copilot Vulnerabilities
Researchers from Varonis Threat Labs discovered a vulnerability in Microsoft Copilot Personal, dubbed 'CoSnitch,' that allows attackers to execute commands without user confirmation. By manipulating the AI's responses,…
10 articles · Updated August 18, 2026 -
Microsoft Copilot Data Theft via Reprompt Attack Exploit
Researchers revealed a security exploit in Microsoft Copilot that allowed attackers to steal user data through a single malicious link. This 'Reprompt' attack bypassed data leak protections and enabled session…
9 articles · Updated January 15, 2026
Recent Intelligence Reports
- Critical Microsoft Copilot CoSnitch Flaw Lets Hackers Steal Sensitive Data With One Click — Gbhackers · August 19, 2026
- Microsoft finally patches critical one-click Copilot vulnerability, almost eight months after learning of it — Csoonline · August 19, 2026
- 'CoSnitch' Attack Tricked Copilot into Mapping Out Architecture — Darkreading · August 18, 2026
- Copilot tricked into telling reseachers how to hack itself — Theregister · August 18, 2026
- Researchers Uncover RovoBlast Vulnerability in Atlassian AI Assistant — Infosecurity-Magazine · August 10, 2026
- SearchLeak attack turns Copilot Enterprise into an insider threat — Computing · June 16, 2026
- Critical SearchLeak Flaw in Microsoft 365 Copilot Exposed Sensitive Enterprise Data — Thecyberexpress · June 16, 2026
- Copilot 'SearchLeak' Attack Allows 1 — Darkreading · June 15, 2026