This Copilot vulnerability could expose emails, 2FA codes, and other sensitive data — Blankdot