Full Archive · Page 5

Research archive, page 5

Browse entries 97–120 of 1032. Return to the first page to search and filter the complete collection.

Håkon Måløy July 30, 2026 analysis

Context Collapse: hidden Word prompts propagate through Copilot-generated documents

Håkon Måløy demonstrates a cross-domain prompt-injection chain in Microsoft 365 Copilot for Word: hidden instructions in an external document alter a generated report and copy themselves into the output, which becomes a trusted carrier in later drafting sessions. Microsoft confirmed the behavior and deployed payload-specific mitigations, but Måløy reproduced the attack class after 144 days of coordinated disclosure; each hop still requires another Copilot drafting or editing operation.