Microsoft Copilot vulnerability enables password theft via malicious link
A security vulnerability in Microsoft Copilot allowed attackers to steal user passwords when a target clicked a malicious link. Reported by security journalist Dan Goodin, the flaw underscores critical risks surrounding hidden application interfaces and prompt handling in commercial AI tools. Claims are as reported; this summary makes no determination about accuracy or significance.
- First detected
- Aug 26, 2026
- Last updated
- Aug 27, 2026
Moderate confidence
Based on a single independent report.
Limited corroboration
1 reporting source
What does this mean?
Corroboration measures how many genuinely independent sources support the event. Confidence measures how reliable the available evidence appears.
Stable
No recent reporting has materially changed the known facts.
Follow this development to see meaningful updates as new evidence emerges.
Save keeps this for later. Follow tracks meaningful changes as new evidence emerges — it shapes your Following Feed, alerts, and digest eligibility, and doesn't promise an instant notification.
Why it matters
Enterprise deployment of AI assistants introduces new attack vectors where subtle parameter manipulation can bypass traditional application security boundaries. With Copilot embedded across enterprise workflows and operating systems, vulnerabilities that permit credential theft via simple link interaction present immediate identity and access management risks for IT administrators and security teams.
Coverage
Independent reporting
Primary/vendor sources vs independent reporting
Primary / vendor source: information published directly by the company, organization, government body or project involved. Useful as a primary source, but not independent confirmation.
Independent reporting: reporting or analysis from a source independent of the organization making the underlying claim.
How this developed
Aug 26, 2026
Development detected
Aug 18, 2026
New reporting added
Microsoft Copilot reveals secret input that allowed it to be hackedArs TechnicaIndependent reporting
Related Intelligence
- ReportAlso involving Microsoft
Chinese hackers spied on thousands of companies after breaching IT giant ConnectWise
According to TechCrunch, Microsoft attributed a major breach at IT software provider ConnectWise to a China-aligned threat actor. Microsoft reported that the attackers deployed AI agents to rapidly infiltrate and spy on thousands of ConnectWise customer networks.
TechCrunch - ReportAlso involving Microsoft
OpenAI to bring AI models to Google's cloud, in further expansion beyond Microsoft
CNBC reports that OpenAI is expanding the availability of its artificial intelligence models to Google Cloud. This rollout extends OpenAI's model distribution across all three major hyperscale cloud platforms, moving further beyond its historical reliance on Microsoft.
CNBC Tech - ReportAlso involving Microsoft
OpenAI to Bring Models to Google Cloud
OpenAI announced a partnership to make its models available on Google Cloud. The agreement expands OpenAI's enterprise distribution and reduces its operational reliance on Microsoft, with whom it previously maintained exclusive cloud distribution arrangements.
The Information - ReportAlso involving Microsoft
Microsoft Warns of Chinese State-Linked Cyberattacks Powered by AI Agent
Microsoft reports that Chinese state-aligned threat actor Storm-0940 used an AI agent named Artex to automate cyberattacks. According to Microsoft, the campaign targeted hundreds of organizations globally across multiple industries, with activity detected as early as September.
The Information