NEUMicrosoft 365 Copilot: Data Leak via URL Parameter Injection Patched16. June 2026Cybersecurity, GoogleShare on:A single click on a manipulated Microsoft link was sufficient to exfiltrate sensitive data such as one-time passwords and corporate files through parameter-to-prompt injection. Share on: