Researchers demonstrated that a prompt could instruct Microsoft Copilot to search a victim's inbox, extract sensitive data, and leak it to an attacker-controlled server

From the articleMicrosoft Copilot reveals secret input that allowed it to be hackedAlso in Copilot tricked into telling reseachers how to hack itself