A single mystery charge on a banking app is often the first visible crack in a much larger fraud operation. What looks like a harmless $35 debit or a test transaction can be the opening move in ...
Varonis found a “Reprompt” attack that let a single link hijack Microsoft Copilot Personal sessions and exfiltrate data; Microsoft patched it in January 2026.