Product
Copilot
- First Reported
- Aug 17, 2026
- Latest Reported
- Sep 28, 2026
Reported Context (4)
- Recorded Future MCP extends that same role natively to agents, wherever they run, including Claude, ChatGPT, Copilot, Cursor, and Gemini CLI. Recorded Future Launches MCP to Connect AI Agents with Threat Intelligence
- 9. All are Critical-severity and two carry a “perfect” 10.0 CVSS base score; these affect Azure, Copilot, Discovery Studio, Entra, Fabric, and Power Automate. We include these nine items in the usual charts and Microsoft’s September Patch Tuesday Addresses 973 CVEs Across 39 Product Families
- in demand for AI software by faking the software itself: names users trust, like Claude, ChatGPT, and Copilot, become delivery vehicles for malware. For defenders that is good news – or at least, not all bad – Sophos Finds Fake AI Installers Dominated Malware Cases
- vulnerabilities affecting 10 families have already been mitigated, and a twentieth (CVE-2026-24301, a Copilot Web issue) was handled several days later. The average CVSS Base score for those 20 is 9.3, with three Microsoft’s August Patch Tuesday fixes 421 vulnerabilities, including an actively exploited Windows flaw
CVE (91)
Malware (3)
People (3)
Threat Actors (4)
MITRE ATT&CK (5)
Vendors (8)
Products (72)
Tools (3)
Industries (5)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.