Microsoft Copilot Had a Secret Input Hackers Used to Steal Passwords

A hidden parameter in Microsoft Copilot let attackers steal passwords from victims who clicked a crafted link.