Critical Copilot vulnerability allowed hackers to steal 2FA code from users
arstechnica.com