Executive Summary
Microsoft reports multiple nation-state actors experimenting with prompt injection against AI assistants and Copilot-style tools via emails, SaaS documents and websites, aiming at data leakage, phishing amplification and unauthorized actions.
What Happened
Microsoft detailed how multiple nation-state threat actors are experimenting with prompt injection to manipulate AI assistants and Copilot-style tools used in enterprises.[rich_content:2] The report describes scenarios where malicious content in emails, SaaS documents, and websites is crafted to override system instructions, leading to data leakage, phishing amplification, and unauthorized actions through connected tools.[rich_content:2] Microsoft introduced new content labeling, isolation, and grounding safeguards and urged organizations, including SMBs and SaaS providers, to treat untrusted AI inputs as an attack surface.[rich_content:2]
Affected Products
- Microsoft Copilot
Vulnerability / Attack Technique
Nation-state prompt injection campaigns
Technical Mechanism
Malicious content is crafted to override assistant instructions when processed.
AI Security Category
LLM01:2025 Prompt Injection
Part of the Prompt Injection topic.
Relevant Frameworks
RealGround Analysis
State actors are testing AI assistants as an entry point. RealGround analysis: assistants with enterprise data access are now espionage targets.
Recommended Controls
- Monitor assistant actions on enterprise data
- Limit assistant access to sensitive repositories
Related RealGround Service
Secure AI Agent Build · or start with the free AI Agent Security Scanner.
Sources
Microsoft Security Blog: https://www.microsoft.com/en-us/security/blog/2025/03/03/nation-state-actors-abusing-prompt-injection-to-target-ai-assistants
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.