Varonis found a “Reprompt” attack that let a single link hijack Microsoft Copilot Personal sessions and exfiltrate data; Microsoft patched it in January 2026.

Confer is designed to look and feel like ChatGPT or Claude, but your conversations can't be used for training or advertising.

Reprompt impacted Microsoft Copilot Personal and, according to the team, gave "threat actors an invisible entry point to perform a data‑exfiltration chain that bypasses enterprise security controls ...

It turns out the sandbox game Hytale can even run its own game within itself, thanks to a talented modder’s effort.