Varonis found a “Reprompt” attack that let a single link hijack Microsoft Copilot Personal sessions and exfiltrate data; Microsoft patched it in January 2026.
Researchers from KU Leuven University's Computer Security and Industrial Cryptography group have identified a set of vulnerabilities they call WhisperPair. Their findings reveal that attackers within ...