21:37
2026-07-29
embracethered.com
ai-safety
Copirate 365: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299)
Security researcher Johann Rehberger disclosed a chain of vulnerabilities in Microsoft Copilot, assigned CVE-2026-24299, that allowed persistent data exfiltration via HTML preview, delayed tool invoca…