In a way, the engineering behind Confer is profoundly simple: the private key is kept with the user, so after the data is ...
Varonis found a “Reprompt” attack that let a single link hijack Microsoft Copilot Personal sessions and exfiltrate data; Microsoft patched it in January 2026.