AnalysisCybersecurityAugust 18, 2026

Researchers hack Microsoft Copilot via secret ?autorun=1 parameter

Read original source →arstechnica.com

Varonis researchers exploited Microsoft 365 Copilot Enterprise by asking the AI itself to reveal an undocumented prompt parameter, ?autorun=1, that bypasses user consent for executing commands. The exploit could exfiltrate user data when a user clicks a link.

People · Lior Adar

1 source

More stories today

Open the live feed