18:18
2026-08-18
hwbusters.com
artificial-intelligence
Copilot Prompt Injection: the Chatbot Named an Undocumented autorun Parameter When Asked
Researchers probing Microsoft Copilot's URL handling got the chatbot itself to name an undocumented 'autorun=1' parameter that, under specific session conditions, executes a supplied prompt on page lo…