Full Archive · Page 8

Research archive, page 8

Browse entries 169–192 of 1127. Return to the first page to search and filter the complete collection.

Håkon Måløy July 30, 2026 analysis

Context Collapse: hidden Word prompts propagate through Copilot-generated documents

Håkon Måløy demonstrates a cross-domain prompt-injection chain in Microsoft 365 Copilot for Word: hidden instructions in an external document alter a generated report and copy themselves into the output, which becomes a trusted carrier in later drafting sessions. Microsoft confirmed the behavior and deployed payload-specific mitigations, but Måløy reproduced the attack class after 144 days of coordinated disclosure; each hop still requires another Copilot drafting or editing operation.