Copilot 'SearchLeak' Attack Allows 1-Click Data Theft
AI disclosure
Summary
The critical, three-stage attack is now patched, but it's part of a new group of AI prompt-injection issues that use hidden URLs and other variables.