Cybersecurity · 20 Aug 2026
Microsoft patches a one-click Copilot data-theft flaw eight months after disclosure
The bug let a single malicious link pull data from a victim's connected Gmail, Drive and Calendar — and Copilot itself revealed the undocumented parameter that made it work.