Varonis found a “Reprompt” attack that let a single link hijack Microsoft Copilot Personal sessions and exfiltrate data; Microsoft patched it in January 2026.

You don't know Windows 11 as well as you think you do. I reveal all the strange, brilliant, and downright surprising features ...

I tried four vibe-coding tools, including Cursor and Replit, with no coding background. Here's what worked (and what didn't).

ZDNET's key takeaways Dubbed "Reprompt," the attack used a URL parameter to steal user data.A single click was enough to ...