Microsoft 365 Copilot prompt injection can alter report figures and copy hidden instructions into generated files, letting them affect later drafts.

Researcher says months of coordination with Microsoft have yet to produce a robust mitigation

Although there are a few ways to mitigate the risk, the only way to block it is to get AI to differentiate instructions from data, which is impossible today.