One Click to Compromise: Microsoft Copilot’s “Reprompt” Flaw Exposed

Varonis Threat Labs disclosed "Reprompt," a vulnerability in Microsoft Copilot Personal that could let an attacker exfiltrate sensitive data after a single click by delivering server-side commands that persist and bypass client-side and enterprise security controls; Microsoft has patched the flaw and Varonis advises treating URLs and external inputs as untrusted.