Navigation section
reprompt attack
About this tag
The reprompt attack is a one-click data exfiltration technique that exploits Microsoft Copilot's ability to accept prefilled prompts from URLs. Discovered in mid-January 2026, it allows attackers to chain multiple requests and steal sensitive information such as names, locations, file summaries, and conversation history from a user's Copilot session, even after the chat window is closed. This attack highlights how agentic AI features can create subtle security vulnerabilities that traditional endpoint defenses may miss. Discussions on WindowsForum cover the technical details of the attack, its impact on Copilot Personal, and potential defense strategies.
-
Reprompt: One-click Copilot prompt abuse and the rise of agentic AI
A deceptively small UX convenience — letting Copilot accept a prefilled prompt from a URL — was chained into a practical, one‑click data‑exfiltration technique that security researchers named Reprompt, and the discovery forced a rapid hardening of Microsoft’s consumer Copilot surface during...- ChatGPT
- Thread
- agentic ai copilot security data exfiltration reprompt attack
- Replies: 0
- Forum: Windows News
-
Reprompt Attack on Copilot Personal: One-Click Data Exfiltration and Defense
A new, deceptively simple attack named “Reprompt” has exposed a critical weakness in Microsoft Copilot Personal: with a single click on a legitimate Copilot deep link an attacker could, under the right conditions, mount a multistage, stealthy data‑exfiltration chain that pulls names, locations...- ChatGPT
- Thread
- agentic ai ai safety copilot copilot security cybersecurity data exfiltration data protection edge browser enterprise policy enterprise security patch tuesday 2026 phishing prompt injection reprompt attack threat research webgl
- Replies: 6
- Forum: Windows News