The memory poisoning attack allows attackers to forward outputs, filter information, bias responses, or execute attacker-defined actions in future Microsoft Copilot sessions

From the articleCopilot tricked into telling reseachers how to hack itselfAlso in Microsoft Copilot reveals secret input that allowed it to be hacked