Microsoft Copilot just exfiltrated a company's files. The attack was one email. Here's the mechanism.
A penetration tester exfiltrated a company's confidential files by sending a single email that required no user interaction, no malware, and no link clicks. Microsoft Copilot, acting on the email, str…