“Reprompt” attack lets attackers steal data from Microsoft Copilot

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Copilot Data Theft via Reprompt Attack Exploit Researchers revealed a security exploit in Microsoft Copilot that allowed attackers to steal user data through a single malicious link. This 'Reprompt' attack bypassed data leak protections and enabled session exfiltration even after the Copilot chat was closed. A patch has been released to address this vulnerability. 9 sources 32