Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
THREAT ADVISORY CoSnitch Microsoft Copilot Personal Information Disclosure (prior to 8/18/26) August 26, 2026
Malware Families
Excerpt
DOWNLOAD PDF Severity: High CVSS: 8.8 CVE: CVE-2026-24301 Affected service: Microsoft Copilot Personal / Copilot Web Not Affected : Copilot Enterprise Status: Patched by Microsoft on August 18, 2026 Executive Summary Varonis Threat Labs disclosed a high-severity vulnerability chain in Microsoft Copilot Personal named CoSnitch and tracked as CVE-2026-24301 . The vulnerability could allow an attacker to distribute a specially crafted Copilot link that automatically executes…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-24301 | Medium | Score 54/100 | First seen |
IOC Relationship Graph
Building graph…