Experts manage to hack Microsoft Copilot by continually asking it questions about itself

Copilot keyboard button.

• Varonis uncovers CoSnitch, a chain of flaws letting Copilot leak sensitive data
• Exploit used malicious URLs and persistent memory poisoning to bypass guardrails
• Microsoft patched CVE‑2026‑24301 server‑side; technique may affect other AI models

Microsoft’s Copilot AI just told a group of researchers how to abuse it for data exfiltration, and it worked. It was not a straightforward process, and the AI did not turn “evil”, but one might say it is gullible and somewhat naive.