Last seen June 16, 2026

AI Prompt Injection Vulnerability

Critical Copilot vulnerability allowed hackers to steal 2FA code from users Ars Technica

Technical Severity
Low severity
Lifecycle Status

STABLE

Sources

What Happened

Critical Copilot vulnerability allowed hackers to steal 2FA code from users Ars Technica

Why This Matters

Current evidence identifies a security issue involving the affected technology, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.

Exposure

My Interests Exposure

Exposure unknown

Recommended Response
Last Seen

Jun 16, 2026 12:30

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: UNKNOWN

Primary entities:

MicrosoftPrompt InjectionCritical Copilot2026junretrieve

Timeline

  • Incident first seen
    Jun 16, 2026 12:30

    BugSkan first recorded this incident.

  • Critical Copilot vulnerability allowed hackers to steal 2FA code from users - Ars Technica
    Jun 16, 2026 12:30

    news.google.com · Research

Sources

Critical Copilot vulnerability allowed hackers to steal 2FA code from users - Ars Technica

news.google.com · Jun 16, 2026 12:30

Critical Copilot vulnerability allowed hackers to steal 2FA code from users Ars Technica

Open publisher source

Other BugSkan incidents that share identifiers, products, or vendors with this report.

My Interests Match

Want personalized relevance?

Create an account to see which incidents overlap with your interests.

← Back to incident intelligence