Microsoft Defender for Office

Spammers borrowed the prompt-injection character block to split "funding" in half

Microsoft's hunting signature for hidden AI instructions kept firing on ordinary bulk mail instead, where the invisible characters were doing nothing more ambitious than breaking a keyword, and failing at that.