Microsoft Copilot Cowork Exfiltrates Files

Microsoft Copilot is encountering significant challenges in preventing data leaks. The system allowed agents to send emails to users' inboxes without approval, creating security vulnerabilities. These emails could contain external images that lead to data exfiltration when opened, exposing sensitive information. OneDrive's pre-authenticated download links could be exploited through successful prompt injection attacks, allowing attackers to download files easily. This highlights ongoing challenges in designing secure agentic systems and the need for robust security measures.