🕵️ RESEARCH & DEEP DIVES
- CoSnitch flaws let one click hijack Microsoft Copilot Personal
Researchers disclosed CoSnitch flaws in Microsoft Copilot Personal.- Microsoft Copilot Personal at copilot.microsoft.com was affected; Microsoft 365 Copilot was not identified as affected.
- CVE-2026-24301 enabled access to connected Gmail, Google Drive, Google Calendar, chat history, and Copilot memory.
- A crafted link paired the q= and undocumented autorun=1 parameters to execute prompts in an authenticated session without user interaction.
- Prompts could exfiltrate data to attacker-controlled servers, including https://webhook.site/75aabb18-9bcf-4383-9e29-349fbc4c40e8/SUPPORT.
- A separate web-summarization prompt-injection path could persist attacker instructions in Copilot memory.
📄 Source: msrc.microsoft.com · 📎 Coverage: arstechnica.com · 👁 via Dark Reading
📋 ADVISORIES
- AWS details custom authentication for AgentCore Gateway tool integrations
AWS describes using a request Lambda interceptor to add custom authentication to AgentCore Gateway.- Amazon Bedrock AgentCore Gateway customers integrating AI agents with tools
- AgentCore Gateway natively supports OAuth 2.0, IAM, and API key authentication
- Legacy HTTP Basic Authentication environments require custom authentication handling
- A request Lambda interceptor extends the gateway’s authentication flow for tool requests
📎 Coverage: aws.amazon.com · 👁 via AWS Security Blog
🔓 CVEs & KEV
- Other: 19 CVEs (worst 9.9)