Secret parameter allowed hackers to steal passwords when a target clicked on a link.

Source: [Ars Technica](https://arstechnica.com/security/2026/08/microsoft-copilot-reveals-secret-input-that-allowed-it-to-be-hacked/)

Sponsored