🧋 Microsoft Copilot Cowork Exfiltrates Files
「 This is done by exploiting the fact that, unlike other sensitive actions, sending emails and Teams messages to the active user does not require human approval, and opening the compromised messages in Teams or Outlook can trigger attacker-controlled network requests 」
https://www.promptarmor.com/resources/microsoft-copilot-cowork-exfiltrates-files