Microsoft Copilot Cowork Controlled by Attacker, Bypassing Sandbox
A vulnerability in Microsoft Copilot Cowork, an agent in Microsoft 365, allowed attackers to bypass the sandbox and establish a command and control loop, enabling data exfiltration from Outlook, Share…