The critical, three-stage attack is now patched, but it's part of a new group of AI prompt-injection issues that use hidden URLs and other variables.
Copilot 'SearchLeak' Attack Allows 1-Click Data Theft
Résumé + lien vers la source. Sans paywall, sans tracking.