Patched Microsoft Copilot Reprompt exploit stole user data

Data security research firm Varonis Threat Labs has published a report that details an exploit it calls “Reprompt” that allowed attackers to silently steal your personal data via Microsoft Copilot.

Reprompt “gives threat actors an invisible entry point to perform a data‑exfiltration chain that bypasses enterprise security controls entirely and accesses sensitive data without detection — all from one click,” Varonis Threat Labs says.