Copilot tricked into telling reseachers how to hack itself

Varonis researchers disclosed “CoSnitch,” a Copilot prompt-injection/auto-execution vulnerability where an undocumented autorun=1 URL parameter allowed a pre-filled prompt to execute in an authenticated user session without interaction; attackers could use this one-click vector to exfiltrate data via connected OAuth services, poison Copilot’s memory, and modify future responses. Microsoft was notified and planned a patch and CVE.