The memory poisoning attack allows attackers to forward outputs, filter information, bias responses, or execute attacker-defined actions in future Microsoft Copilot sessions