Copilot Told Researchers How to Hack It. Microsoft Patched Eight Months Later.

Varonis Threat Labs' CoSnitch chain turned Microsoft Copilot Personal into its own whistleblower, exposing an undocumented autorun parameter that made one-click data theft possible.