Researchers crafted a malicious URL using the format https://copilot.microsoft.com/?q=&autorun=1 to execute prompts without user interaction or visible confirmation