One click is all it takes: How ‘Reprompt’ turned Microsoft Copilot into data exfiltration tools
This title could be clearer and more informative.Try out Clickbait Shieldfor free (5 uses left this month).
Security researchers discovered 'Reprompt,' a three-step attack chain exploiting Microsoft Copilot Personal through prompt injection. The attack uses URL parameter manipulation (P2P injection), double-request bypass, and chain-request techniques to exfiltrate sensitive data invisibly. It requires only a single click on a malicious link and bypasses security controls by hiding instructions in server follow-up requests. Microsoft has patched the vulnerability. Experts recommend treating URLs as untrusted, implementing phishing-resistant authentication throughout sessions, and applying least privilege principles when deploying AI assistants.
