Vue lecture

Microsoft Copilot vulnerability allowed attackers to quietly steal your personal data with a single click — this is the Copilot "Reprompt" exploit

Varonis Threat Labs has published a report detailing a now-patched security exploit that it discovered in Microsoft Copilot, which allowed an attacker to silently steal data from users just by clicking a link.

A phone displaying Copilot in front of a screen that say Microsoft.

  •  
❌