Varonis

Copilot Told Researchers How to Bypass Its Own Guardrail

Varonis researchers extracted an undocumented prompt parameter from Microsoft 365 Copilot by repeatedly asking it about its own safety mechanism, then used it to exfiltrate user data with a single click and no confirmation.