Varonis Threat Labs

Microsoft Fixes 'Reprompt' Flaw That Enabled One-Click Data Theft From Copilot Personal

Researchers describe a multistage prompt-injection that abused a Copilot URL parameter, leaving few traces.