<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Data-Exfiltration on HackingPassion.com : root@HackingPassion.com-[~]</title><link>https://hackingpassion.com/tags/data-exfiltration/</link><description>Recent content in Data-Exfiltration on HackingPassion.com : root@HackingPassion.com-[~]</description><generator>Hugo</generator><language>en</language><lastBuildDate>Thu, 15 Jan 2026 12:12:46 +0100</lastBuildDate><atom:link href="https://hackingpassion.com/tags/data-exfiltration/index.xml" rel="self" type="application/rss+xml"/><item><title>Microsoft Patches Copilot Vulnerability That Leaked Data with One Click</title><link>https://hackingpassion.com/microsoft-copilot-reprompt-data-theft-one-click/</link><pubDate>Thu, 15 Jan 2026 12:12:46 +0100</pubDate><guid>https://hackingpassion.com/microsoft-copilot-reprompt-data-theft-one-click/</guid><description>&lt;p>January 13, 2026. Microsoft patches a vulnerability in Copilot that let attackers steal personal data with a single click. The security bypass that worked for five months? Tell the AI to do everything twice. Microsoft has spent $80 billion on AI infrastructure and plans $120 billion more for 2026, but the safeguards protecting your data failed against a one-line prompt. 🤔&lt;/p>
&lt;p>Varonis Threat Labs discovered a way to steal personal data from Microsoft Copilot using nothing more than a single click on a link, with no plugins required and no further user interaction needed. The attack continues running even after the victim closes the browser tab.&lt;/p></description></item></channel></rss>