Dubbed "Reprompt," the attack used a URL parameter to steal user data. A single click was enough to trigger the entire attack chain. Attackers could pull sensitive Copilot data, even after the window ...