Microsoft Copilot Personal Flaws Enable One-Click Data Exfiltration via CoSnitch
Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal, collectively named CoSnitch, that could allow a single click on a…
Tag: one-click attack
CVE-2026-24301: Microsoft Copilot Personal CoSnitch Vulnerabilities
CVE-2026-24301 refers to a set of three vulnerabilities in Microsoft Copilot Personal, collectively named CoSnitch, discovered by Varonis Threat Labs. These flaws…
Atlassian Rovo: One-Click Attack via rovoChatPrompt
Atlassian Rovo is an AI assistant that was vulnerable to a one-click attack (RovoBlast) abusing the rovoChatPrompt URL parameter. Atlassian fixed the…