2025-08 · 2025-Q3
Varonis "Reprompt" - Microsoft Copilot Single-Click Data Theft
Layer tags: not yet tagged.
Target
Microsoft Copilot
Impact
File access history, location, conversation memory exfiltrated; attacker maintains control after chat closed
Root Cause
URL query parameter ?q= accepted as pre-filled prompt without validation