Microsoft Copilot Cowork Will Hand Your Financial Data to Attackers and Microsoft Won’t Stop It
PromptArmor demonstrates a trivial file exfiltration attack against Microsoft Copilot Cowork that succeeds 5 for 5 times. No human approval required. Here’s the architectural rot behind it.