A single mystery charge on a banking app is often the first visible crack in a much larger fraud operation. What looks like a harmless $35 debit or a test transaction can be the opening move in ...

Varonis found a “Reprompt” attack that let a single link hijack Microsoft Copilot Personal sessions and exfiltrate data; Microsoft patched it in January 2026.

The finding adds a new laundering route to the $282 million wallet compromise, highlighting how the attacker is attempting to ...