Varonis found a “Reprompt” attack that let a single link hijack Microsoft Copilot Personal sessions and exfiltrate data; Microsoft patched it in January 2026.
Security firm Mandiant has released a database that allows any administrative password protected by Microsoft’s NTLM.v1 hash ...
Reprompt impacted Microsoft Copilot Personal and, according to the team, gave "threat actors an invisible entry point to perform a data‑exfiltration chain that bypasses enterprise security controls ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback