Varonis found a “Reprompt” attack that let a single link hijack Microsoft Copilot Personal sessions and exfiltrate data; Microsoft patched it in January 2026.

Reprompt impacted Microsoft Copilot Personal and, according to the team, gave "threat actors an invisible entry point to perform a data‑exfiltration chain that bypasses enterprise security controls ...

"We have implemented technological measures to prevent the Grok account from allowing the editing of images of real people in ...

X’s update comes after weeks of sexualized images of women and children being generated with Grok finally prompting ...