UNVERIFIEDSingle SourceCritical Copilot vulnerability allowed hackers to seal 2FA code from usersArs Technica|6/16/2026