Jan 162026 Researchers Reveal Reprompt Attack Allowing Single-Click Data Exfiltration From Microsoft Copilot Experts disclosed a Reprompt attack that allowed single-click data exfiltration from Microsoft Copilot via indirect prompt injection, now fixed by MS.