Microsoft Copilot Cowork Flaw Transforms AI Agents into Data Exfiltrators

The discovery of automatic action exploitation in Copilot Cowork reveals how integration-heavy AI agents can be weaponized for silent data theft. This case underscores a critical shift in the threat landscape where benign enterprise permissions become the primary vector for sophisticated exfiltration attacks.