--- title: Microsoft Copilot escalates to sysadmin, Zimbra zero-day... description: A SQL Server Copilot bug lets a low-privileged user plant instructions that escalate a victim to sysadmin, and attackers have been exploiting an... canonical: https://daily.dev/posts/microsoft-copilot-escalates-to-sysadmin-zimbra-zero-day-steals-mailboxes-rqizqiqw0 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Microsoft Copilot escalates to sysadmin, Zimbra zero-day steals mailboxes | daily.dev og:description: A SQL Server Copilot bug lets a low-privileged user plant instructions that escalate a victim to sysadmin, and attackers have been exploiting an... og:url: https://daily.dev/posts/microsoft-copilot-escalates-to-sysadmin-zimbra-zero-day-steals-mailboxes-rqizqiqw0 og:image: https://api.daily.dev/og/posts/rQiZqIQW0.png og:image:alt: Microsoft Copilot escalates to sysadmin, Zimbra zero-day steals mailboxes og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Microsoft Copilot escalates to sysadmin, Zimbra zero-day steals mailboxes **[Security Digest](https://daily.dev/sources/security_digest)** · 4 min read · 0 upvotes · 0 comments ## Summary A SQL Server Copilot bug lets a low-privileged user plant instructions that escalate a victim to sysadmin, and attackers have been exploiting an unauthenticated Zimbra command injection flaw since July to steal mailbox data. A military-grade data breach hit the Pentagon's personnel system, exposing SSNs for 2.8 million people. Cisco is patching its fifth actively exploited SD-WAN zero-day this year, and Alex Stamos joined Cognition as CISO betting that cheap attacker AI will outpace expensive defender AI. ## Content **TLDR:** A SQL Server Copilot bug lets a low-privileged user plant instructions that escalate a victim to sysadmin, and attackers have been exploiting an unauthenticated Zimbra command injection flaw since July to steal mailbox data. A military-grade data breach hit the Pentagon's personnel system, exposing SSNs for 2.8 million people. Cisco is patching its fifth actively exploited SD-WAN zero-day this year, and Alex Stamos joined Cognition as CISO betting that cheap attacker AI will outpace expensive defender AI. --- ## Copilot in SQL Server Management Studio escalates to sysadmin via CVE-2026-65669 Researchers at BlueHat Asia 2026 showed that Copilot's 'read-only mode' in SSMS was enforced only by a fragile regex classifier, bypassable with dynamic SQL like sp_executesql to run arbitrary T/SQL. Worse, a database owner can plant instructions in extended properties named AGENTS.md or CONSTITUTION.md that Copilot auto-loads into context, so when a higher-privileged user connects, those instructions execute with their privileges. The fix isn't a better prompt, it's treating read-only as an actual permission boundary rather than a model suggestion. [Read more](https://daily.dev/posts/x1PhRewBO) ## Zimbra zero-day exploited since late July to steal mailboxes Microsoft says attackers used CVE-2026-73570, an unauthenticated command injection in Zimbra's SNMP notification path, to run OS commands via crafted emails and steal mailbox backups and credentials. Synacor patched it July 20 but sat on disclosure for three weeks; Shadowserver still found 274 compromised instances among roughly 10,000 exposed servers. The attack chain after initial access included JSP web shells, reverse shells, and privilege escalation, so if you're running zimbra-snmp with notifications enabled, assume you were a target. [Read more](https://daily.dev/posts/KDuyqZzo5) ## Pentagon breach exposes SSNs for 2.8 million current and former personnel A months-long breach of the Defense Manpower Data Center, running from October 2025 to mid-July 2026, exploited a vulnerability in an unspecified file-sharing system and exposed unencrypted Social Security numbers, names, and birth dates for about 2.8 million living people and nearly 300,000 deceased individuals. The DoD says it has no indication the data was misused but hasn't explained how it reached that conclusion. This lands in the same stretch as the FBI's ShinyHunters breach, and it's hard not to think of the 2015 OPM hack every time one of these personnel-records systems gets popped. [Read more](https://daily.dev/posts/tsw9zCzO8) ## Cisco's fifth SD-WAN zero-day of the year gets patched CVE-2026-76504 is a CVSS 9.8 authentication bypass in Catalyst SD-WAN Manager that's been under active exploitation since September, with no workaround available. A URL-encoding handling bug lets an unauthenticated attacker reach admin-level API access on any configuration; look for encoded characters like %6a in requests to j_security_check as the main IOC. Five SD-WAN zero-days in a single year is a pattern, not bad luck, and it argues for treating SD-WAN management planes as internet-facing crown jewels rather than internal plumbing. [Read more](https://daily.dev/posts/vlGakkfnh) --- ## Also notable - **Alex Stamos joins Cognition as CISO:** The former Yahoo/Facebook/SentinelOne security chief is betting that cheap attacker AI versus expensive defender AI becomes the core economic problem in security, summed up as 'Patch Tuesday will lead to Ransom Wednesday.' [Read more](https://daily.dev/posts/GibVs66lD) - **16-year-old finds unsigned-JWT bug in Microsoft's internal Titan platform:** By swapping the UPN field in an unsigned token to 'admin,' researcher Faav got sysadmin access to 17 connected databases spanning 9,863 tables and an estimated 17.3 trillion rows, earning a $5,000 bounty. [Read more](https://daily.dev/posts/br9vGgrSX) - **543,000 valid credentials found sitting exposed on public GitHub repos:** Truffle Security scanned 224 million repos and found a median exposure time of 784 days, with 51.8% of live credentials falling into types GitHub's Push Protection doesn't even cover, like database connection strings. [Read more](https://daily.dev/posts/fBLHMhUEM) - **OpenAI bans accounts tied to Moonshot AI over model-reasoning extraction:** A July campaign spiked to 16,000 requests from over 4,000 users in two days, and OpenAI closed a replay vulnerability that let encrypted reasoning be copied between conversations and decrypted. [Read more](https://daily.dev/feed-by-ids?id=JNFGoCiwi&id=tZK01RsTC) - **Monthly CVE disclosures doubled in 20 months as AI reshapes vulnerability discovery:** Google Threat Intelligence Group found monthly CVEs went from 5,045 to over 10,700 between January 2026 and August 2026, with AI-discovered bugs skewing toward RCE at double the rate of the broader CVE pool. [Read more](https://daily.dev/posts/MyQUOB41c) ## Similar posts on daily.dev - [Copilot 'SearchLeak' Attack Allows 1-Click Data Theft](https://daily.dev/posts/copilot-searchleak-attack-allows-1-click-data-theft-wrsuwvrwg) · Dark Reading · 0 upvotes · 0 comments - [New attack turned Microsoft 365 Copilot into 1-click data theft tool](https://daily.dev/posts/new-attack-turned-microsoft-365-copilot-into-1-click-data-theft-tool-ffqgdzkcx) · BleepingComputer · 0 upvotes · 0 comments - [Critical Microsoft Excel bug weaponizes Copilot Agent](https://daily.dev/posts/critical-microsoft-excel-bug-weaponizes-copilot-agent-jiiniihmc) · The Register · 0 upvotes · 0 comments - [ZCS Command Injection via SNMP Handlers Enables Unauthenticated Remote Code Execution](https://daily.dev/posts/zcs-command-injection-via-snmp-handlers-enables-unauthenticated-remote-code-execution-jit2afxha) · InfoQ · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cisco](https://daily.dev/tags/cisco), [#zero-day](https://daily.dev/tags/zero-day), [#microsoft-copilot](https://daily.dev/tags/microsoft-copilot) [View this post on daily.dev](https://daily.dev/posts/microsoft-copilot-escalates-to-sysadmin-zimbra-zero-day-steals-mailboxes-rqizqiqw0) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/microsoft-copilot-escalates-to-sysadmin-zimbra-zero-day-steals-mailboxes-rqizqiqw0","headline":"Microsoft Copilot escalates to sysadmin, Zimbra zero-day steals mailboxes","text":"A SQL Server Copilot bug lets a low-privileged user plant instructions that escalate a victim to sysadmin, and attackers have been exploiting an unauthenticated Zimbra command injection flaw since July to steal mailbox data. A military-grade data breach hit the Pentagon's personnel system, exposing SSNs for 2.8 million people. Cisco is patching its fifth actively exploited SD-WAN zero-day this year, and Alex Stamos joined Cognition as CISO betting that cheap attacker AI will outpace expensive defender AI.","url":"https://daily.dev/posts/microsoft-copilot-escalates-to-sysadmin-zimbra-zero-day-steals-mailboxes-rqizqiqw0","datePublished":"2026-10-01T04:17:33.598Z","dateModified":"2026-10-01T04:17:52.709Z","author":{"@type":"Organization","name":"Security Digest","logo":"https://media.daily.dev/image/upload/s--m4ZKB_C0--/f_auto,q_auto/v1779959612/logos/security_digest","url":"https://daily.dev/sources/security_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/security_digest","name":"Security Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Digest","item":"https://daily.dev/sources/security_digest"},{"@type":"ListItem","position":3,"name":"Microsoft Copilot escalates to sysadmin, Zimbra zero-day steals mailboxes"}]} ```