This article explains the "Website wants to look for and connect to any device on your local network" popup in Google Chrome.

Varonis found a “Reprompt” attack that let a single link hijack Microsoft Copilot Personal sessions and exfiltrate data; Microsoft patched it in January 2026.