A SINGLE CLICK MOUNTED A COVERT, MULTISTAGE ATTACK AGAINST COPILOT

Summary from the TLDR InfoSec newsletter

Varonis researchers discovered a now-patched vulnerability in Microsoft Copilot Personal, dubbed "Reprompt," that enabled single-click data exfiltration via indirect prompt injection in legitimate Copilot URLs. The attack allowed the extraction of usernames, locations, and chat history even after the victim closed the chat window. Microsoft 365 Copilot was not affected. The vulnerability has been remediated as of this week.