Misbehavior1 sourceFirst seen
Microsoft's Copilot Cowork Could Be Tricked Into Mailing Your Files Out Through a Picture
Ourtake
Yes, that is a real product name. The agent sent emails without asking, and the images did the rest.
What happened
Simon Willison reported that Microsoft Copilot Cowork let agents send emails to a user's own inbox without approval. Those messages rendered external images that could trigger network requests, so a successful prompt injection could leak OneDrive pre-authenticated download links and let attackers download files. The article describes a vulnerability; it reports no confirmed exploitation.