Microsoft Copilot reveals secret input that allowed it to be hacked

Ars Technica security headlines covering active exploitation of critical vulnerabilities, credential theft, supply-chain compromise, remote device takeover, server backdoors, AI-assisted attacks, phishing, surveillance, and emerging authentication defenses. Several reports describe potentially widespread or high-impact threats, including an actively exploited Mac screen-sharing flaw, a maximum-severity Microsoft Exchange vulnerability attributed to Kremlin-linked actors, and credential exfiltration from a compromised AI package.