Bottom line: Varonis researchers discovered CoSnitch (CVE-2026-24301), a 0-click vulnerability in Microsoft Copilot in which the AI disclosed its own attack vectors through meta-hacking.
Security researchers at Varonis have identified a 0-click vulnerability in Microsoft Copilot dubbed “CoSnitch” (CVE-2026-24301), in which the AI could be induced, through targeted “meta-hacking,” to reveal how it can be compromised and exploited for attacks.
The Varonis team investigated whether Microsoft Copilot could be prompted through targeted questioning to disclose its own attack surfaces and vulnerabilities—an approach the researchers refer to as “meta-hacking.” The resulting vulnerability was named CoSnitch and catalogued under CVE-2026-24301. According to the source, this is a 0-click vulnerability, meaning user interaction is not required for exploitation.
This case is relevant for CISOs because Copilot is deeply integrated into documents, emails, Teams chats, and other corporate data across many Microsoft 365 environments. A vulnerability that allows the system to be induced to self-disclose its own attack vectors can serve as a starting point for further attacks on sensitive corporate data, particularly since no user interaction is necessary. The incident joins a growing number of investigations that view AI assistants themselves as both an attack target and a potential tool for attackers.
The original article from borncity.com references the Varonis investigation without providing further technical details on the specific exploitation method, affected Copilot versions, or patch status. CISOs should monitor developments regarding the CVE-2026-24301 disclosure as well as any Microsoft security advisories, and check whether and when a patch will be made available. In the meantime, it is advisable to review which Copilot integrations are active within one’s own organization and what data access they have.
Source: borncity.com · Published August 19, 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.8.3.