Researchers trick Microsoft Copilot into revealing how to hack itself through URL manipulation
Security researchers successfully manipulated Microsoft Copilot Personal into disclosing its own vulnerabilities by embedding malicious prompts in URLs, eventually tricking the AI assistant into sending sensitive data to external servers and poisoning its persistent memory.
