Varonis found a “Reprompt” attack that let a single link hijack Microsoft Copilot Personal sessions and exfiltrate data; Microsoft patched it in January 2026.

Press the Shift key five times in succession -- Turns on Sticky keys, which change how shortcuts work so you don't have to press and hold multiple keys to trigger them. For example, under Sticky Keys, ...