Secret parameter allowed hackers to steal passwords when a target clicked on a link.
Ars Technica - All content
• Dan Goodin
Microsoft Copilot reveals secret input that allowed it to be hacked