Share story
Security

Microsoft patches reported Copilot Personal data-exfiltration flaws

Microsoft patches reported Copilot Personal data-exfiltration flaws Image: Primary
Varonis Threat Labs disclosed three flaws in consumer Copilot Personal that it said enabled a crafted link to auto-run an attacker prompt in an authenticated session, query already authorized connected services and send retrieved data to an attacker-controlled webhook. Varonis reported the issue to Microsoft in December 2025; the article says patches shipped August 18. The disclosure is tracked as CVE-2026-24301.
Sources
The Hacker News
In this story
Microsoft
Published by Tech & Business, a media brand covering technology and business. This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Infrastructure Products
Infrastructure Products

Amazon commits more than $1 billion to data center communities

Amazon committed Friday to donating more than $1 billion over five years to communities neighboring its data centers, Ars Technica reported. AWS chief executive Matt Garman said communities would choose priorities including educat...

Ars Technica
Robotics Capital
Robotics Capital

Fortem raises $50 million with Lockheed Martin participating

Counter-drone company Fortem has raised $50 million in Series B funding, with Lockheed Martin participating, Bloomberg reported. Fortem is seeking to expand manufacturing and bookings rapidly. CEO Jon Gruen said its relationship w...

Bloomberg Technology
AI Infrastructure
AI Infrastructure

Broadcom syndicate seeks $60 billion for AI chip financing

Broadcom's Wall Street syndicate is starting to gather $60 billion in fresh AI chip financing, Bloomberg reported, citing sources. The financing effort would help Anthropic and other companies access chips and other infrastructure...

Techmeme
Products Infrastructure
Products Infrastructure

TXO acquires Wesbell Communications to expand infrastructure services

TXO announced Friday that it had acquired Wesbell Communications for an undisclosed sum, adding network and engineering services, managed services, asset recovery and third-party maintenance capabilities. Wesbell serves Tier 1 tel...

Yahoo Finance
Products
Products

Google raises Pixel 10a starting price from $499 to $599

Google raised the Pixel 10a's US starting price Friday from $499 to $599, with the 256GB model now costing $699, 9to5Google reported. The new prices are in effect at the Google Store, Amazon and Best Buy. Google Store also lists ...

9to5Google