Varonis shows how one click on a crafted link can drain data from connected apps in Microsoft Copilot Personal.
Varonis researchers found that Bluekit's centralized dashboard captures session tokens and cookies after victims complete 2FA, rendering that security measure…