Varonis Threat Labs discovered a critical vulnerability in Microsoft Copilot Personal, tracked as CVE-2026-24301 and nicknamed 'CoSnitch,' which allowed attackers to exfiltrate sensitive data from con…
Microsoft senior security manager David Weston told Black Hat USA that AI tools are accelerating vulnerability discovery and exploit development, making traditional reactive patching obsolete. Microso…
Microsoft has confirmed an AI worm that propagates through its Copilot and other applications, including Word, after a Norwegian researcher disclosed the vulnerability. The worm, demonstrated by resea…
Norwegian AI researcher Håkon Måløy reported on Tuesday that an AI worm can spread through Microsoft Word documents using Microsoft Copilot as a vector, with Microsoft confirming the findings and stat…
Norwegian AI researcher Hakon Maloy publicly disclosed a self-propagating prompt-injection attack on July 28 that can turn documents edited or generated by Microsoft Copilot for Word into carriers for…
A security researcher demonstrated that AI worms can self-propagate through Microsoft Copilot for Word by hiding malicious instructions in documents, which Copilot then copies into new documents durin…
Security researcher Håkon Måløy disclosed on July 28 that hidden instructions in a Word document can influence Copilot-generated output and copy themselves into new documents, creating a self-propagat…
Microsoft is expanding its use of AI-powered vulnerability discovery across the Windows codebase to find and fix security issues faster, using its multi-model agentic scanning harness (MDASH) and dedi…
Microsoft has introduced MDASH, a multi-model agentic security platform that uses over 100 specialized AI agents to automate large-scale vulnerability discovery across Windows, Hyper-V, and Azure code…