Researchers found a Microsoft Copilot bug that lets hackers steal personal info via a shared chat link. Here’s how it works ...