Phishing

Attackers repurposed prompt injection's invisible Unicode to break email keyword matching

Microsoft's hunt for email-borne prompt injection instead surfaced a three-month phishing campaign hiding tag characters inside words like funding, which puts both problems on one detection team's desk.