Zdnet

Reprompt Attack Allows Data Theft from Microsoft Copilot with One Click

First seen 15 Jan 2026, 04:59 UTC • Bleepingcomputer

•82% similarity •31.3

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Researchers have identified a new attack method called Reprompt that enables hackers to hijack Microsoft Copilot sessions with a single click. This vulnerability allows attackers to exfiltrate sensitive user data without requiring any additional plugins or tricks, posing a risk to users of Microsoft's AI assistant integrated into Windows and various applications.

ThreatCluster AI How this analysis works

Attack Flow

8 entities, 13 inferred relationships (STIX 2.1).

Technique (3)

Data Breach
Phishing
T1566 - Phishing

Organization (1)

Varonis Threat Labs

Affected Platform (4)

Copilot
Copilot Personal
Microsoft 365 Copilot
Microsoft Copilot

Relationships

Data Breach targets Copilot
Data Breach targets Copilot Personal
Data Breach targets Microsoft 365 Copilot
Data Breach targets Microsoft Copilot
Phishing targets Copilot
Phishing targets Copilot Personal
Phishing targets Microsoft 365 Copilot
Phishing targets Microsoft Copilot
T1566 - Phishing targets Copilot
T1566 - Phishing targets Copilot Personal
T1566 - Phishing targets Microsoft 365 Copilot
T1566 - Phishing targets Microsoft Copilot
Data Breach related to Varonis Threat Labs

Community

Browse all →

Tracked Entities in This Story

Varonis Threat Labs Copilot Copilot Personal Microsoft 365 Copilot Microsoft Copilot

Reprompt Attack Allows Data Theft from Microsoft Copilot with One Click

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story