Ai-memory — AI news & analysis

Microsoft patched CoSnitch on Monday — but a patch can't un-poison an AI assistant's memory, and that's the part buyers keep missing

On 18 August 2026 Microsoft fixed CVE-2026-24301, a critical one-click flaw in Copilot Personal that Varonis reported in December 2025. The exploit chained auto-executing prompts, OAuth-connected Gmail and Drive access, and memory poisoning that survives password changes, session revocation and device re-enrollment. Microsoft says customers 'do not need to take any action.' For anyone whose memory was already poisoned, that is not true. Here's what actually happened and what to check.