⚡ Breaking One Poisoned File Is All It Takes: Microsoft Copilot Cowork Exfiltrates Your SharePoint Data
Microsoft's own docs say Copilot Cowork asks permission before sending messages. In practice, messages to yourself bypass approval entirely — and that's all an attacker needs.