CoSnitch: When Your AI Assistant Becomes Its Own Whistleblower

Varonis Threat Labs uncovered another one-click vulnerability in Microsoft Copilot Personal dubbed CoSnitch (critical, CVE-2026-24301 ), which quietly executes an attack chain that exfiltrates data from enterprises without obvious red flags.