Microsoft Copilot Cowork is susceptible to file exfiltration attacks through indirect prompt injection due to insecure automatic action approvals for sending emails and Teams messages. This vulnerability has shown a high success rate against advanced models, including Claude Opus 4.7.

Microsoft is renaming Copilot in Windows 11 instead of removing it. The company plans to integrate AI features more thoughtfully and address user concerns regarding the operating system.