ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.Supporting sources are pending verification.
Microsoft Copilot Reprompt Attack Security Flaw Fixed
A security flaw in Microsoft Copilot allowed reprompt attacks that could expose user data through malicious links. Microsoft fixed the vulnerability.
AII-1000-99969
What happened
Microsoft Copilot contained a reprompt attack security flaw that could expose user data. The company fixed the vulnerability.
Reported impact
Clicking incorrect Copilot links posed a risk to user data.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.