SearchLeak

Microsoft on Tuesday patched a critical one-click vulnerability in its personal Copilot AI assistant, nearly eight months after security firm Varonis reported the flaw, which allowed attackers to exec…

Varonis Threat Labs disclosed a one-click vulnerability in Microsoft Copilot Personal, dubbed CoSnitch, that enables data exfiltration from enterprises via an attack chain that exploits three flaws, i…

Varonis Threat Labs disclosed a critical one-click data-exfiltration vulnerability in Microsoft 365 Copilot Enterprise Search, tracked as CVE-2026-42824. The attack chains a parameter-to-prompt inject…