Varonis found a “Reprompt” attack that let a single link hijack Microsoft Copilot Personal sessions and exfiltrate data; Microsoft patched it in January 2026.
Reprompt impacted Microsoft Copilot Personal and, according to the team, gave "threat actors an invisible entry point to perform a data‑exfiltration chain that bypasses enterprise security controls ...
A cross-site scripting (XSS) flaw in the web-based control panel used by operators of the StealC info-stealing malware ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback