# Microsoft patches CoSnitch security flaw in Copilot after 8 months delay

> Microsoft has shipped a fix for CoSnitch, a critical vulnerability in Copilot that researchers at Varonis Threat Labs say could let an attacker exfiltrate enterprise data with a single click. The patch landed on August 18, but the more uncomfortable detail is the timeline: the company reportedly knew about the flaw for roughly eight months before closing it. The bug sits at an awkward intersection of AI and security. Copilot is being wired into email, documents, and internal systems across large organizations, which means a one-click data-leak path is not a narrow problem, it is a potential window into a company's most sensitive information. An eight-month gap between discovery and remediation raises fair questions about how quickly vendors are hardening AI assistants that already hold deep access. The episode is a useful reminder that the security maturity of enterprise AI is still catching up to how fast these tools are being deployed. As agents gain more autonomy and reach, the blast radius of a single overlooked flaw only grows.

_Section: [Daily AI Updates](https://www.wortins.com/daily-ai) · Source: Tech Startups · Published Thursday, August 20, 2026_

## Wortins' read

Microsoft has shipped a fix for CoSnitch, a critical vulnerability in Copilot that researchers at Varonis Threat Labs say could let an attacker exfiltrate enterprise data with a single click. The patch landed on August 18, but the more uncomfortable detail is the timeline: the company reportedly knew about the flaw for roughly eight months before closing it. The bug sits at an awkward intersection of AI and security. Copilot is being wired into email, documents, and internal systems across large organizations, which means a one-click data-leak path is not a narrow problem, it is a potential window into a company's most sensitive information. An eight-month gap between discovery and remediation raises fair questions about how quickly vendors are hardening AI assistants that already hold deep access. The episode is a useful reminder that the security maturity of enterprise AI is still catching up to how fast these tools are being deployed. As agents gain more autonomy and reach, the blast radius of a single overlooked flaw only grows.

## Source

[Read the full story at Tech Startups](https://techstartups.com/2026/08/19/top-tech-news-today-august-19-2026-landspace-microsoft-nvidia-openai-samsung-unitree-z-ai-more/)

## Related coverage

- [Anthropic Signs $45 Billion Compute Deal with British Infrastructure Firm Nscale](https://www.wortins.com/story/anthropic-signs-45-billion-compute-deal-with-british-infrast-9d89144c) — [TechCrunch](https://techcrunch.com/2026/08/26/anthropic-continues-compute-gobbling-streak-in-45-billion-deal-with-nscale/)
- [Google Cloud Launches Gemini Enterprise for Financial Services](https://www.wortins.com/story/google-cloud-launches-gemini-enterprise-for-financial-servic-5d0fd141) — [Google Cloud](https://www.googlecloudpresscorner.com/2026-08-25-Google-Cloud-Launches-Gemini-Enterprise-for-Financial-Services)
- [Cohere Launches Command A+ Mixture-of-Experts Model](https://www.wortins.com/story/cohere-launches-command-a-mixture-of-experts-model-5d840970) — [Cohere](https://docs.cohere.com/docs/command-a-plus)
- [OpenAI Announces Astra Model Solves 10 Previously Unsolved Math Problems](https://www.wortins.com/story/openai-announces-astra-model-solves-10-previously-unsolved-m-cc3a3dfc) — [OpenAI](https://openai.com/index/introducing-astra/)
- [SoftBank Plans Record $6.3 Billion Retail Bond Sale to Fund OpenAI Investment](https://www.wortins.com/story/softbank-plans-record-6-3-billion-retail-bond-sale-to-fund-o-dbc93b82) — [Bloomberg](https://www.bloomberg.com/news/videos/2026-08-20/bloomberg-tech-8-20-2026-video)
- [Moonshot AI Releases Kimi K3, World's Largest Open-Source AI Model at 2.8 Trillion Parameters](https://www.wortins.com/story/moonshot-ai-releases-kimi-k3-world-s-largest-open-source-ai--cde823ba) — [Tom's Hardware](https://www.tomshardware.com/tech-industry/artificial-intelligence/moonshot-releases-2-8-trillion-parameter-kimi-k3)

---

_Curated and written by [Wortins](https://www.wortins.com) — The daily AI briefing. Every story links to its original source; the "Wortins read" on each is our own original analysis. [About Wortins & our editorial approach](https://www.wortins.com/about)._