Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps

The feed reports widespread active exploitation and emerging threats, including critical vulnerabilities in GitLab, Forminator, VMware vCenter, SAP Commerce Cloud, Apple macOS Screen Sharing, Ray, MLflow, and FUXA. Other coverage includes AI-agent prompt propagation, cloud and SaaS credential theft, SharePoint/Teams-based implants, supply-chain typosquatting, ransomware-related fraud, botnets, rootkits, phishing, and session hijacking. Multiple issues involve unauthenticated remote code execution, credential or secret theft, destructive project modification, and exploitation in the wild.