Friday, August 21, 2026 · 3 of 5

1. Microsoft patched a one-click Copilot data-theft chain 8 months after disclosure

   — CVE-2026-24301 "CoSnitch," exfiltrates from connected Gmail/Drive/Calendar (Aug 20)

   Security