Microsoft finally patches critical one-click Copilot vulnerability, almost eight months after learning of it

Microsoft patched a critical vulnerability in Copilot (its AI assistant) called CoSnitch, nearly eight months after learning about it. The flaw exploited an LLM's (large language model's) inability to distinguish user data from instructions, allowing attackers to automatically execute malicious commands, steal data from connected apps like Gmail and OneDrive, and inject persistent instructions into a user's memory that survive password changes. Copilot itself accidentally revealed how the vulnerability worked when researchers asked it to explain why auto-execution was supposedly impossible.