2025-08 · 2025-Q3
Varonis "Reprompt" - Microsoft Copilot Single-Click Data Theft
Who actually said "do this"?
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- No
- Actor
- Attacker
Target
Microsoft Copilot
Impact
File access history, location, conversation memory exfiltrated; attacker maintains control after chat closed
Root cause
URL query parameter ?q= accepted as pre-filled prompt without validation
Sources
Catalog
Cite this: AgentProv incident record: Varonis "Reprompt" - Microsoft Copilot Single-Click Data Theft (2025-08). https://agentprov.com/incidents/2025-08-varonis-reprompt-microsoft-copilot-single-click-data-theft
Related
- Also L2 · 2026-10-15Datadog: Counterfeit Policy Text Collapses an Injection Classifier's Recall and Pushes a LangChain Risk Gate Under Its Block ThresholdL2Instruction
- Also L2 · 2026-10-08Cisco Talos: Four Malware Families Carry Instructions Aimed at the LLMs That Triage ThemL2Instruction
- Also L2 · 2026-10-07Barracuda: Phishing Emails Carry Hidden Prompt Injections for the Recipient's AI Inbox AssistantL2Instruction