News · latest

More filters

ASCII smuggling crosses over from AI prompt injection to phishing evasion | Microsoft Security Blog

Microsoft reports that ASCII smuggling — hiding content in invisible Unicode tag characters, a technique popular for indirect prompt injection against AI models — has been repurposed by phishers to split financial-lure keywords (e.g. "fun[U+E0020]ding") and evade content filters in a campaign that peaked above 2.37 million messages in late February. Analysis found no smuggled AI instructions in the flagged messages; the invisible characters were used purely for keyword-filter evasion, illustrating how AI-era attack methods cross over into traditional threats. Details →

Prompt injection protection in Microsoft Defender for Office 365 - Microsoft Defender for Office 365 | Microsoft Learn

Microsoft documentation describes prompt injection protection built into Microsoft Defender for Office 365, which detects attacker-authored instructions embedded in inbound email (body, subject, quoted replies, attachments, or hidden markup) before that content reaches a user or an AI assistant such as Microsoft 365 Copilot. The feature explains indirect prompt injection techniques including direct instructions to the model and hidden/invisible text (white-on-white fonts, zero-size text, HTML/CSS tricks) and detects them as part of existing mail-flow inspection. Details →
See the API docs to pull all 962 items →

How the wire is made

Poll & cluster

Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.

Curate

AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.

Read the full methodology →

Every item here is one machine-curated intelligence object, not a headline.

Read the wire for free. There is a small charge to ask the index questions.

The wire, open

The complete curated feed, no key required.

Subscribe to the RSS feed

The vector desk

Query the index by meaning, not just keyword.

  • GET /api/items?tags=&minSeverity=&itemType=
  • GET /api/search?q= — keyword
  • GET /api/semantic?q= — vector
Preview semantic search