Researchers Social-Engineered Copilot Into Exposing Flaw

Researchers at Varonis identified CoSnitch, a critical vulnerability in Microsoft Copilot that was exposed through meta-hacking or social engineering the AI’s reasoning engine. By manipulating the model into explaining its own architectural restrictions, the researchers forced it to reveal an undocumented URL parameter that could facilitate data exfiltration.