Vulnerabilities4 min read
Excel XSS Bug Weaponizes Copilot for Zero-Click Data Theft
CVE-2026-26144 allows attackers to silently exfiltrate sensitive data through Microsoft Copilot Agent without user interaction. Patch now or disable Copilot.
Marcus ChenMar 20, 2026