Varonis found a “Reprompt” attack that let a single link hijack Microsoft Copilot Personal sessions and exfiltrate data; Microsoft patched it in January 2026.
Reprompt impacted Microsoft Copilot Personal and, according to the team, gave "threat actors an invisible entry point to perform a data‑exfiltration chain that bypasses enterprise security controls ...
Excel now supports IMPORTTEXT and IMPORTCSV functions that load external text and CSV files as dynamic arrays, making it ...
A new one-click attack flow discovered by Varonis Threat Labs researchers underscores this fact. ‘Reprompt,’ as they’ve ...
Microsoft adds IMPORTTEXT and IMPORTCSV to Excel, letting users pull text files directly into the grid with simple formulas.