THREATOPS
THREAT OPSThreat News › CoSnitch: When Your AI Assistant Becomes Its Own Whistleblower

CoSnitch: When Your AI Assistant Becomes Its Own Whistleblower

medvaronis_blogPublished 2026-08-18

<p>Varonis Threat Labs uncovered another one-click vulnerability in Microsoft Copilot Personal dubbed CoSnitch, which quietly executes an attack chain that exfiltrates data from enterprises without obvious red flags.</p> <p>What makes CoSnitch unique is how Copilot surfaced its own vulnerabilities, a method we are calling meta-hacking. Our researchers didn't have to reverse-engineer the flaw. Th

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://www.varonis.com/blog/cosnitch