Security researchers warn that a single malicious Copilot link could quietly hijack your AI session and expose personal data.