MICROSOFT PATCHES CRITICAL COPILOT STUDIO VULNERABILITY EXPOSING SENSITIVE DATA

Summary from the TLDR InfoSec newsletter

A critical security flaw (CVE-2024-38206) in Microsoft's Copilot Studio could allow authenticated attackers to bypass SSRF protection and access sensitive information. The vulnerability exploits Copilot's external web request feature to access Microsoft's internal infrastructure.