News Desk 2024: Hacking Microsoft Copilot Is Scary Easy

Researcher Michael Bargury demonstrated a practical attack against Microsoft Copilot, showing a single crafted email can manipulate Copilot's outputs and potentially allow an attacker to leverage Copilot's broad access to enterprise data (emails, calendar, Teams messages, files and plugins). The report warns this visibility makes Copilot an attractive target, though it describes a proof-of-concept demonstration rather than confirmed active exploitation across organizations.