Story
Microsoft Copilot Cowork Exfiltrates Files
1 report
1 website
1 discussion
Latest report
Overview
Microsoft Copilot Cowork is susceptible to file exfiltration attacks through indirect prompt injection due to insecure automatic action approvals for sending emails and Teams messages. This vulnerability has shown a high success rate against advanced models, including Claude Opus 4.7.
Summary from promptarmor.com.
Reports
One report so far. Additional coverage will appear here when it is linked to this story.
promptarmor.com
Microsoft Copilot Cowork Exfiltrates Files
Read report →
Community reactions
Each reaction summarizes sampled comments from the linked discussion.
Hacker News · promptarmor.com
Hacker News discussion ↗
Historical count: 5 · 5 saved in sample · Historical sample
Analysis ready
Read this discussion’s reaction
Based on 5 sampled comments from this thread. Analyzed 2026-05-26.
- Praise: The flexibility of AI skills as plugins for agents can enhance functionality, but it also raises significant security concerns that need addressing.
- Praise: The community is actively discussing the implications of AI skills, indicating a growing awareness of the risks associated with LLMs accessing sensitive data.
- Concern: Rushing the deployment of Copilot Cowork without adequate security measures poses serious risks, potentially leading to data exfiltration.
- Concern: The lack of a trust boundary between trusted and untrusted contexts in AI skills is a fundamental flaw that could be exploited maliciously.
- Concern: The misleading framing of the article may downplay the real concerns regarding the security of AI systems and their capabilities.