Microsoft 365 Copilot

Prompt Injection Emerges as Top Risk for LLM Applications in Production

Prompt injection attacks are moving from theoretical demonstrations to real-world exploits targeting AI assistants in enterprise environments. Attackers embed malicious instructions in emails, documents, and code comments that override developer rules when models process untrusted input. Incidents involving Microsoft 365 Copilot, GitHub Copilot, and Cursor have shown data exfiltration and remote code execution risks with severity scores above 9.0. The core issue stems from the lack of strict boundaries between trusted system prompts and untrusted external content fed into large language models. Defenses require layered controls including code-enforced permissions, input filtering, human confirmation for high-risk actions, and explicit marking of external data. Major vendors including OpenAI, Anthropic, and Google acknowledge that no single static defense can fully eliminate the threat. OWASP ranks prompt injection as the leading risk for LLM applications, urging organizations to treat AI agents as systems with untrusted inputs.

Microsoft Adds Option to Completely Disable Copilot Key in Windows 11

Microsoft is testing a new setting in experimental builds of Windows 11 that lets home users fully disable the dedicated Copilot key on compatible keyboards. The option, labeled Do nothing, appears in the Bluetooth and devices section under Keyboard settings and allows users to reassign the key away from launching the AI assistant. Enthusiast phantomofearth discovered the feature, which currently sits alongside choices for launching Microsoft 365 Copilot, performing a search, or executing a custom action. The rollout is gradual, with some Windows Insiders receiving the setting earlier than others. The Copilot key was introduced on new Windows laptops in 2024 as a replacement for the right Ctrl key to highlight AI PCs. Earlier this year Microsoft had already promised limited support for restoring the original Ctrl function, while users previously relied on third-party tools such as NoCopilotKey to prevent accidental activation.