Agents Can Read Your Copilot Memory by Default

Thu, 5 Nov 2026 · 24:05

TRANS_ID: 2026-11-05

The memory path is read-only, but the policy that opens it is on by default.

MC1539004: Work IQ MCP /memory/me/coreMemories lets agents read a user's Copilot memory profile from December, policy on by default
APT29 'Poisoned Source' mobile watering-hole campaign stealing cookies and device data
Prompt adware in a Codex jailbreak bundle (haiou-codex) rewriting agent instructions
SonicWall won't patch EOL GMS 9.5.2 and earlier while a related flaw is actively exploited
Also: Copilot connectors for Work IQ APIs, Copilot Studio agent metrics GA, Android and APT package flaws

This episode is AI-voiced (NotebookLM) from Ted Johansson's curated daily M365 and cyber governance digest.

SPECTRUM ANALYSISBITRATE: 320KBPS

0:00—

STANDBY

SEC_LVL_3