Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps

thehackernews.com Aug 18, 2026

Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps

Curated by Shubham · TechCapsules · Aug 18, 2026

AI-summarised brief · reviewed before publication

Varonis Threat Labs exposed three vulnerabilities in Microsoft Copilot Personal, dubbed CoSnitch, that allow a single click on a crafted link to silently exfiltrate data from connected apps. The flaws exploit an undocumented URL parameter (autorun=1) that bypasses user interaction, enabling the assistant to pull sensitive information such as email metadata, calendar details, and Google Drive summaries. Microsoft reported the issue in December 2025 and released patches on August 18, 2026. No evidence of wild exploitation was found.

💡 Why It Matters

· The discovery shows that even consumer‑grade AI assistants can be weaponized for covert data theft, underscoring the need for stricter input validation and monitoring of AI‑driven workflows.

AI Capsules Microsoft

Read full article on thehackernews.com

Firefox Smart Window adds AI web search, automatic tab groups, and more

Mozilla has expanded its beta Smart Window feature in Firefox, adding AI-driven tab grouping, duplicate tab detection, and a partnership with Exa for real‑time web search that displays source links without leaving the window. Users can now query natural language prompts to preview browsing history and receive visual previews of pages. Upcoming updates promise to surface recent browsing journeys, auto‑populate forms, and maintain user control over shared tabs. The feature is currently available in English for U.S. and Canadian users.

💡 By keeping search, tab management, and content previews within a single pane, Mozilla reduces friction in multitasking, potentially reshaping how users navigate and organize online research.

ng.shotoe.com · Aug 19

iOS 18.2 Brings Major Upgrade to Apple Intelligence. How to …

Apple unveiled iOS 18.2, the first major update to its Apple Intelligence suite, adding ChatGPT‑powered Siri responses, a generative‑AI Writing Tools feature, and Genmoji, which lets users design custom emoji. The release also introduces Image Playground, a text‑to‑image generator, and Visual Intelligence, a camera‑based visual search tool comparable to Google Lens, available exclusively on the iPhone 16. Compatibility extends to iPhone XS and newer for iOS 18, but only devices that support Apple Intelligence—iPhone 16, iPad models with M1 chips or later, and Macs with M1 or newer—receive the new AI capabilities. Apple advises users to back up data, update to iOS 18.1.1 first, ensure sufficient battery charge, and connect to Wi‑Fi before installing the 18.2 update.

💡 The upgrade finally delivers the AI functionality Apple promised, turning iPhones into on‑device conversational and visual assistants and setting a new baseline for mobile AI interaction.

financialexpress.com · Aug 19

I asked ChatGPT to plan my career switch. It gave me these…

A journalist tested whether ChatGPT could map his existing professional profile to new career options. After providing a detailed account of his experience, skills, interests and income goals, the model first extracted transferable abilities such as editing, research, information synthesis, AI tool usage, multitasking, deadline management, critical reading, communication and adaptability. It then clustered these into five functional categories: turning information into understanding, turning understanding into output, managing workload, solving problems, and working with people and information. Based on this analysis, ChatGPT proposed five distinct paths—business analyst, UX researcher, operations manager, customer success manager and AI trainer—each with identified skill gaps, estimated learning periods ranging from two to nine months, and projected annual salaries between Rs 6 lakh and Rs 14 lakh. The experiment demonstrates AI’s capacity to generate personalized career transition roadmaps.

💡 It shows that generative AI can quickly translate a nuanced skill set into concrete, market‑relevant job pathways, offering a scalable tool for workers seeking mid‑career pivots.

businessworld.in · Aug 19

OpenAI Introduces ChatGPT For Teens With New Parental Safety Controls

OpenAI launched ChatGPT for Teens, a version of its AI chatbot tailored for users aged 13‑17, on Tuesday. The service automatically activates when the system detects a user under 18 or when the user self‑reports a teen age, and it blends educational tools—such as Study Mode, quizzes, visualisations, dedicated study hours, and homework reminders—with reinforced safety features. Parents can link their accounts, set Quiet Hours, and receive alerts for high‑risk interactions, including those related to eating disorders. OpenAI positioned the product as a means to foster critical thinking and direct teens to real‑world support when AI advice is insufficient. The rollout arrives amid lawsuits accusing ChatGPT of harming children and ahead of a potential record‑setting IPO, intensifying scrutiny of the company’s youth‑safety protocols.

💡 By embedding parental oversight directly into the user experience, OpenAI aims to pre‑empt regulatory pressure while keeping teens engaged with AI‑enhanced learning.

tribuneonlineng.com · Aug 19

From megawatts to prosperity: Rural electrification in the age of AI

In 2026, artificial‑intelligence firms are confronting a critical bottleneck: reliable, high‑capacity electricity. While earlier AI debates focused on chips and data, the International Energy Agency now projects global data‑centre power use to hit about 945 TWh by 2030—double today’s level and growing 15 % annually, outpacing overall electricity demand four‑fold. Major tech companies are responding by acting like utilities, securing nuclear and gas generation, buying power‑grid assets, and siting new data centres where power is abundant. The shift, dubbed the “Age of Electricity,” promises a 50 % annual rise in global electricity demand from 2026 to 2030, driven by data‑centres, electrified cooling, manufacturing and electric mobility. In Nigeria, the surge reframes electricity from a social service to a cornerstone of economic competitiveness, prompting firms such as REA and RAMCO to rethink investment strategies. Elon Musk’s xAI, despite rumors of a nuclear purchase being unfounded, has built its own generation capacity, deploying gas turbines in Tennessee and committing over $20 billion to a 2 GW data‑centre in Southaven, Mississippi.

💡 The race to secure power will dictate which AI players can scale, reshaping global tech leadership and forcing emerging economies to prioritize energy infrastructure as a competitive asset.

newsbreak.com · Aug 19

Elon Musk Warns Nvidia-Backed $105 Billion Ohio Data Center for OpenAI Will…

Elon Musk publicly questioned the schedule for a massive data center in Pike County, Ohio, that Nvidia has pledged up to $105 billion to support OpenAI’s AI workloads. The facility, being built by SoftBank‑owned SB Energy, is slated to reach 800 MW of power by 2028 and eventually scale to 8 GW, with OpenAI signing a 20‑year lease and Nvidia designated as the exclusive chip supplier. Nvidia’s SEC filing caps its payment obligations at $105 billion, contingent on the center meeting readiness criteria, and includes a $1.5 billion equity infusion into SB Energy following earlier $1 billion investments from OpenAI and SoftBank. Musk’s warning came as his own companies, including SpaceX, aim to secure roughly 10 GW of AI compute by the end of 2027, underscoring competitive pressure in the AI infrastructure race.

💡 Musk’s doubt highlights a looming capacity gap that could force rivals to seek alternative compute sources, reshaping the balance of power in AI hardware supply.