
Microsoft Copilot Secret Input Vulnerability Allowed Credential Theft
Researchers discovered a hidden parameter in Copilot that enabled attackers to steal credentials when victims clicked a malicious link — a reminder of prompt injection risks in embedded AI assistants.








