[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fX5n6J00WHbJ0i8iW6taXE2A05ONZbH0MG5ahv2znCZw":3},{"article":4,"iocs":41,"watch_terms":42,"solutions":43,"lesson":77},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"2f97a64e-0503-47cf-8746-95f59302ba15","'CoSnitch' Attack Tricked Copilot into Mapping Out Architecture","cosnitch-attack-tricked-copilot-into-mapping-out-architecture-cd21e9","Researchers discovered a \"meta-hacking\" technique that can manipulate the AI service into revealing its own security weaknesses.","Researchers have unveiled a novel 'meta-hacking' technique dubbed 'CoSnitch' that exploits AI services like Microsoft Copilot. This method manipulates the AI into inadvertently disclosing its own security vulnerabilities and internal architecture details, posing a significant risk to the integrity and security of AI systems.","New 'CoSnitch' attack tricks AI like Copilot into revealing its own security flaws.","https:\u002F\u002Fwww.darkreading.com\u002Fvulnerabilities-threats\u002Fcosnitch-attack-copilot-mapping-out-architecture","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fbltcaf5eccbac802b13\u002F6a84a0beeed7cf792c0eeed7\u002FAI_apps-alexsl-GettyImages-2213179432.jpg?width=720&quality=80&disable=upscale","2026-08-18T20:17:24+00:00","2026-08-18T22:00:11.86704+00:00",7,[17,20],{"name":18,"type":19},"Copilot","product",{"name":21,"type":22},"AI","technology","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":23,"icon":25,"name":26,"slug":27},null,"AI Security","ai-security",[29,34,36],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":35},{"id":23,"icon":25,"name":26,"slug":27},{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":44,"vendors":70},[45],{"slug":27,"name":46,"problem":47,"products":48},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[49,57,65],{"vendor_slug":50,"vendor_name":51,"vendor_logo":52,"product_slug":53,"product_name":54,"url":55,"description":56},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":66,"product_name":67,"url":68,"description":69},"boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",[71],{"slug":72,"name":73,"logo_path":74,"roles":75},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png",[76],"affected",{"slug":78,"title":79,"body":80,"framework_refs":81,"framework_notes":93},"cosnitch-ai-copilot-manipulated-into-leaking-its-own-architecture","CoSnitch: AI Copilot Manipulated into Leaking Its Own Architecture","The CoSnitch attack demonstrates that AI systems like Microsoft Copilot can be manipulated through carefully crafted prompts to inadvertently reveal their internal architecture, security controls, and vulnerabilities — a technique known as 'meta-hacking.' This exploit highlights a critical gap in how AI services are configured and constrained, particularly around what system-level information they are permitted to discuss or infer. The risk is compounded by the fact that attackers do not need traditional exploits; social engineering the AI itself becomes the attack vector. As AI tools become deeply integrated into enterprise workflows, their misconfiguration or insufficient guardrails can expose sensitive infrastructure details to adversaries, enabling more targeted follow-on attacks.",[82,83,84,85,86,87,88,89,90,91,92],"NIST AI RMF: GOVERN 1.1 – Policies and procedures for AI risk management","NIST SP 800-53 AC-3 – Access Enforcement","NIST SP 800-53 SI-10 – Information Input Validation","NIST SP 800-53 AU-12 – Audit Record Generation","CIS Control 3 – Data Protection","CIS Control 8 – Audit Log Management","CIS Control 16 – Application Software Security","OWASP LLM Top 10 – LLM01: Prompt Injection","OWASP LLM Top 10 – LLM06: Sensitive Information Disclosure","GDPR Article 25 – Data Protection by Design and by Default","MITRE ATLAS – AML.T0051: LLM Prompt Injection",{}]