Browsing: Copilot

Researchers at Varonis Threat Labs got Copilot to send sensitive information to an external server and poison its persistent memory using a hack they call “CoSnitch.” To do it, they continually asked the tool why their requests wouldn’t work. After enough pushing, Copilot gave in, revealing that persistence might be all you need to break…

Microsoft Copilot is a little messy. Unlike ChatGPT, Gemini, or Claude, the company’s AI service isn’t one universal product. Instead, there’s “Copilot,” the AI for consumers, directly competing with the aforementioned AI apps; and “Microsoft 365 Copilot,” the AI for professional use in Microsoft’s work suite. Unless you’re totally immersed in Microsoft’s AI culture, you…

A security researcher has demonstrated how Microsoft Copilot for Word can be tricked into spreading a self‑propagating prompt‑injection “AI worm.” The attack silently alters documents and embeds its own hidden instructions into newly created files, allowing it to spread through normal document-sharing workflows without macros or traditional malware.