https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 20 Aug 2026 19:42:22 +0000 https://vulnerability.circl.lu/sighting/49de144d-0a97-4906-9b62-2c1618fd8a3d/export {"uuid": "49de144d-0a97-4906-9b62-2c1618fd8a3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/aibearnews.bsky.social/post/3mtiogf6yis23", "content": "\ud83d\udd12 Microsoft Copilot \u00e8 stato hackerato... dai suoi stessi ricercatori\nUna vulnerabilit\u00e0 (CVE-2026-24301, CVSS 8.8) permetteva di rubare Gmail, Drive e Calendar con un solo click. Scoperta con una tecnica bizzarra: i ricercatori hanno chiesto a Copilot perch\u00e9 l'attacco fosse impossibile, e...", "creation_timestamp": "2026-08-20T07:02:01.742156Z"} {"uuid": "49de144d-0a97-4906-9b62-2c1618fd8a3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/aibearnews.bsky.social/post/3mtiogf6yis23", "content": "\ud83d\udd12 Microsoft Copilot \u00e8 stato hackerato... dai suoi stessi ricercatori\nUna vulnerabilit\u00e0 (CVE-2026-24301, CVSS 8.8) permetteva di rubare Gmail, Drive e Calendar con un solo click. Scoperta con una tecnica bizzarra: i ricercatori hanno chiesto a Copilot perch\u00e9 l'attacco fosse impossibile, e...", "creation_timestamp": "2026-08-20T07:02:01.742156Z"} https://vulnerability.circl.lu/sighting/49de144d-0a97-4906-9b62-2c1618fd8a3d/export Thu, 20 Aug 2026 07:02:01 +0000 https://vulnerability.circl.lu/sighting/9d81569c-fd08-45ff-b931-4f8de97f70bc/export {"uuid": "9d81569c-fd08-45ff-b931-4f8de97f70bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3mthbsludxl2b", "content": "Researchers got Microsoft Copilot to explain its own security bypass just by asking it the right follow-up\u00a0questions\n\nVaronis Threat Labs disclosed CoSnitch (CVE-2026-24301), a critical\u00a0flaw\u00a0in Microsoft Copilot Personal made of three chained weaknesses that let an attacker exfiltrate data from a\u2026", "creation_timestamp": "2026-08-19T17:43:32.838839Z"} {"uuid": "9d81569c-fd08-45ff-b931-4f8de97f70bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3mthbsludxl2b", "content": "Researchers got Microsoft Copilot to explain its own security bypass just by asking it the right follow-up\u00a0questions\n\nVaronis Threat Labs disclosed CoSnitch (CVE-2026-24301), a critical\u00a0flaw\u00a0in Microsoft Copilot Personal made of three chained weaknesses that let an attacker exfiltrate data from a\u2026", "creation_timestamp": "2026-08-19T17:43:32.838839Z"} https://vulnerability.circl.lu/sighting/9d81569c-fd08-45ff-b931-4f8de97f70bc/export Wed, 19 Aug 2026 17:43:32 +0000 https://vulnerability.circl.lu/sighting/70ae2545-1026-43e3-ba30-eac0621e92fa/export {"uuid": "70ae2545-1026-43e3-ba30-eac0621e92fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/yayafa.bsky.social/post/3mth6bdvma62w", "content": "Microsoft Copilot Personal\u306b\u8106\u5f31\u6027\u3001\u9023\u643a\u30a2\u30d7\u30ea\u304b\u3089\u30ef\u30f3\u30af\u30ea\u30c3\u30af\u3067\u30c7\u30fc\u30bf\u3092\u6d41\u51fa\u3055\u305b\u308b\u6050\u308c\uff08CVE-2026-24301\uff09 | Codebook\uff5cSecurity News\n\nhttps://www.yayafa.com/2868613/\n\nMicrosoft Copilot \u2026", "creation_timestamp": "2026-08-19T16:40:13.458956Z"} {"uuid": "70ae2545-1026-43e3-ba30-eac0621e92fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/yayafa.bsky.social/post/3mth6bdvma62w", "content": "Microsoft Copilot Personal\u306b\u8106\u5f31\u6027\u3001\u9023\u643a\u30a2\u30d7\u30ea\u304b\u3089\u30ef\u30f3\u30af\u30ea\u30c3\u30af\u3067\u30c7\u30fc\u30bf\u3092\u6d41\u51fa\u3055\u305b\u308b\u6050\u308c\uff08CVE-2026-24301\uff09 | Codebook\uff5cSecurity News\n\nhttps://www.yayafa.com/2868613/\n\nMicrosoft Copilot \u2026", "creation_timestamp": "2026-08-19T16:40:13.458956Z"} https://vulnerability.circl.lu/sighting/70ae2545-1026-43e3-ba30-eac0621e92fa/export Wed, 19 Aug 2026 16:40:13 +0000 https://vulnerability.circl.lu/sighting/1ca475c9-29d8-405e-9b71-fb0e1cee8603/export {"uuid": "1ca475c9-29d8-405e-9b71-fb0e1cee8603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mtgvufr3d72c", "content": "\ud83d\udd12 CVE-2026-24301: \"CoSnitch\" vulnerability in Microsoft Copilot\n\nA severe \"CoSnitch\" vulnerability (CVE-2026-24301) in Microsoft Copilot Personal allowed attackers to silently sipho...\n\nhttps://tinyurl.com/27yuyjyg #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-08-19T14:09:48.537162Z"} {"uuid": "1ca475c9-29d8-405e-9b71-fb0e1cee8603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mtgvufr3d72c", "content": "\ud83d\udd12 CVE-2026-24301: \"CoSnitch\" vulnerability in Microsoft Copilot\n\nA severe \"CoSnitch\" vulnerability (CVE-2026-24301) in Microsoft Copilot Personal allowed attackers to silently sipho...\n\nhttps://tinyurl.com/27yuyjyg #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-08-19T14:09:48.537162Z"} https://vulnerability.circl.lu/sighting/1ca475c9-29d8-405e-9b71-fb0e1cee8603/export Wed, 19 Aug 2026 14:09:48 +0000 https://vulnerability.circl.lu/sighting/880604ac-497c-4d37-9694-bb4403a513e5/export {"uuid": "880604ac-497c-4d37-9694-bb4403a513e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24301", "type": "seen", "source": "https://gist.github.com/cyberupdates365/2162e9f0da3d970a21147d1c28caaaf8", "content": "# Critical Microsoft Copilot CoSnitch Vulnerability CVE-2026-24301 Explained\n\nDiscover how the critical microsoft copilot cosnitch vulnerability cve-2026-24301 allowed attackers to steal sensitive data with a single click using meta-hacking.\n\nA severe security flaw tracked as the microsoft copilot cosnitch vulnerability cve-2026-24301 has exposed the hidden risks of connecting third-party applications to personal AI assistants. Discovered by researchers at Varonis Threat Labs, this vulnerability allowed attackers to silently siphon sensitive data from a victim's connected accounts (such as Gmail and Google Drive) with just a single click on a malicious link.\n\nMicrosoft officially patched the vulnerability in Copilot Personal on August 18, 2026. The vulnerability was not a traditional buffer overflow; it was a sophisticated chain of prompt injection and command injection leveraging an undocumented URL parameter (`autorun=1`).\n\n\ud83d\udd17 **[Read the Full Technical Breakdown and Mitigation Steps on CyberUpdates365](https://cyberupdates365.com/copilot-cosnitch-cve-2026-24301/)**", "creation_timestamp": "2026-08-19T08:39:55.037417Z"} {"uuid": "880604ac-497c-4d37-9694-bb4403a513e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24301", "type": "seen", "source": "https://gist.github.com/cyberupdates365/2162e9f0da3d970a21147d1c28caaaf8", "content": "# Critical Microsoft Copilot CoSnitch Vulnerability CVE-2026-24301 Explained\n\nDiscover how the critical microsoft copilot cosnitch vulnerability cve-2026-24301 allowed attackers to steal sensitive data with a single click using meta-hacking.\n\nA severe security flaw tracked as the microsoft copilot cosnitch vulnerability cve-2026-24301 has exposed the hidden risks of connecting third-party applications to personal AI assistants. Discovered by researchers at Varonis Threat Labs, this vulnerability allowed attackers to silently siphon sensitive data from a victim's connected accounts (such as Gmail and Google Drive) with just a single click on a malicious link.\n\nMicrosoft officially patched the vulnerability in Copilot Personal on August 18, 2026. The vulnerability was not a traditional buffer overflow; it was a sophisticated chain of prompt injection and command injection leveraging an undocumented URL parameter (`autorun=1`).\n\n\ud83d\udd17 **[Read the Full Technical Breakdown and Mitigation Steps on CyberUpdates365](https://cyberupdates365.com/copilot-cosnitch-cve-2026-24301/)**", "creation_timestamp": "2026-08-19T08:39:55.037417Z"} https://vulnerability.circl.lu/sighting/880604ac-497c-4d37-9694-bb4403a513e5/export Wed, 19 Aug 2026 08:39:55 +0000 https://vulnerability.circl.lu/sighting/f0736d14-6f73-4fbb-9ea7-b89d721ea7a8/export {"uuid": "f0736d14-6f73-4fbb-9ea7-b89d721ea7a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mtg5g6ykacya", "content": "Microsoft Copilot Personal\u306b\u8106\u5f31\u6027\u3001\u9023\u643a\u30a2\u30d7\u30ea\u304b\u3089\u30ef\u30f3\u30af\u30ea\u30c3\u30af\u3067\u30c7\u30fc\u30bf\u3092\u6d41\u51fa\u3055\u305b\u308b\u6050\u308c\uff08CVE-2026-24301\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47254/", "creation_timestamp": "2026-08-19T06:52:23.277658Z"} {"uuid": "f0736d14-6f73-4fbb-9ea7-b89d721ea7a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mtg5g6ykacya", "content": "Microsoft Copilot Personal\u306b\u8106\u5f31\u6027\u3001\u9023\u643a\u30a2\u30d7\u30ea\u304b\u3089\u30ef\u30f3\u30af\u30ea\u30c3\u30af\u3067\u30c7\u30fc\u30bf\u3092\u6d41\u51fa\u3055\u305b\u308b\u6050\u308c\uff08CVE-2026-24301\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47254/", "creation_timestamp": "2026-08-19T06:52:23.277658Z"} https://vulnerability.circl.lu/sighting/f0736d14-6f73-4fbb-9ea7-b89d721ea7a8/export Wed, 19 Aug 2026 06:52:23 +0000 https://vulnerability.circl.lu/sighting/b5f7aabc-d7c8-4b32-9b9c-215d85fd36d0/export {"uuid": "b5f7aabc-d7c8-4b32-9b9c-215d85fd36d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mtfzibvdch2u", "content": "CoSnitch:Microsoft Copilot\u306e\u8106\u5f31\u6027\u30011\u56de\u306e\u30af\u30ea\u30c3\u30af\u3067\u30c7\u30fc\u30bf\u304c\u5bc6\u304b\u306b\u76d7\u307e\u308c\u308b\u6050\u308c\n\nMicrosoft Copilot Personal\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027(CVE-2026-24301\u3001\u901a\u79f0\u300cCoSnitch\u300d)\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u304c\u60aa\u610f\u3042\u308b\u30ea\u30f3\u30af\u3092\u88ab\u5bb3\u8005\u306b\u30af\u30ea\u30c3\u30af\u3055\u305b\u308b\u3060\u3051\u3067\u3001\u9023\u643a\u3055\u308c\u305f\u30a2\u30ab\u30a6\u30f3\u30c8\u304b\u3089\u6a5f\u5bc6\u60c5\u5831\u3092\u5bc6\u304b\u306b\u76d7\u307f\u51fa\u305b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3053\u3068\u304c\u5206\u304b\u308a\u307e\u3057\u305f\u3002 Microsoft\u306f\u3001Varonis T...", "creation_timestamp": "2026-08-19T05:41:57.179182Z"} {"uuid": "b5f7aabc-d7c8-4b32-9b9c-215d85fd36d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mtfzibvdch2u", "content": "CoSnitch:Microsoft Copilot\u306e\u8106\u5f31\u6027\u30011\u56de\u306e\u30af\u30ea\u30c3\u30af\u3067\u30c7\u30fc\u30bf\u304c\u5bc6\u304b\u306b\u76d7\u307e\u308c\u308b\u6050\u308c\n\nMicrosoft Copilot Personal\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027(CVE-2026-24301\u3001\u901a\u79f0\u300cCoSnitch\u300d)\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u304c\u60aa\u610f\u3042\u308b\u30ea\u30f3\u30af\u3092\u88ab\u5bb3\u8005\u306b\u30af\u30ea\u30c3\u30af\u3055\u305b\u308b\u3060\u3051\u3067\u3001\u9023\u643a\u3055\u308c\u305f\u30a2\u30ab\u30a6\u30f3\u30c8\u304b\u3089\u6a5f\u5bc6\u60c5\u5831\u3092\u5bc6\u304b\u306b\u76d7\u307f\u51fa\u305b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3053\u3068\u304c\u5206\u304b\u308a\u307e\u3057\u305f\u3002 Microsoft\u306f\u3001Varonis T...", "creation_timestamp": "2026-08-19T05:41:57.179182Z"} https://vulnerability.circl.lu/sighting/b5f7aabc-d7c8-4b32-9b9c-215d85fd36d0/export Wed, 19 Aug 2026 05:41:57 +0000 https://vulnerability.circl.lu/sighting/13803e47-13d9-4530-a558-21ab64015acf/export {"uuid": "13803e47-13d9-4530-a558-21ab64015acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mtfqh6zemb2q", "content": "Varonis ontdekt nieuwe \u2018CoSnitch\u2019 kwetsbaarheid in Microsoft Copilot die datadie\n\nVaronis Threat Labs heeft een ernstige kwetsbaarheid ontdekt in Microsoft Copilot Personal, genaamd CoSnitch (CVE-2026-24301). Deze kwetsbaarheid stelt aanvallers in staat om met slechts \u00e9\u00e9n klik op een kwaadaa...", "creation_timestamp": "2026-08-19T03:00:20.230437Z"} {"uuid": "13803e47-13d9-4530-a558-21ab64015acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mtfqh6zemb2q", "content": "Varonis ontdekt nieuwe \u2018CoSnitch\u2019 kwetsbaarheid in Microsoft Copilot die datadie\n\nVaronis Threat Labs heeft een ernstige kwetsbaarheid ontdekt in Microsoft Copilot Personal, genaamd CoSnitch (CVE-2026-24301). Deze kwetsbaarheid stelt aanvallers in staat om met slechts \u00e9\u00e9n klik op een kwaadaa...", "creation_timestamp": "2026-08-19T03:00:20.230437Z"} https://vulnerability.circl.lu/sighting/13803e47-13d9-4530-a558-21ab64015acf/export Wed, 19 Aug 2026 03:00:20 +0000 https://vulnerability.circl.lu/sighting/709ba7ef-9723-4258-90f6-f796c7b31f1f/export {"uuid": "709ba7ef-9723-4258-90f6-f796c7b31f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117117540428017104", "content": "Microsoft has an advisory for a new critical Copilot vulnerability.\nCRITICAL: CVE-2026-24301: Microsoft Copilot Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24301\nMore information:\nCWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') https://cwe.mitre.org/data/definitions/77.html #infosec #Microsoft #Copilot #vulnerability", "creation_timestamp": "2026-08-18T16:50:47.362238Z"} {"uuid": "709ba7ef-9723-4258-90f6-f796c7b31f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117117540428017104", "content": "Microsoft has an advisory for a new critical Copilot vulnerability.\nCRITICAL: CVE-2026-24301: Microsoft Copilot Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24301\nMore information:\nCWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') https://cwe.mitre.org/data/definitions/77.html #infosec #Microsoft #Copilot #vulnerability", "creation_timestamp": "2026-08-18T16:50:47.362238Z"} https://vulnerability.circl.lu/sighting/709ba7ef-9723-4258-90f6-f796c7b31f1f/export Tue, 18 Aug 2026 16:50:47 +0000