Copilot prompt injection goes viral in your documents

All systems based on chatbots can be prompt injected. You can always tell the bot to do things it shouldn’t. The AI vendors try to put in guard rails. The guard rails sort of work for about two seconds. The original sin of chatbots is that data and instructions are mixed together in the same [ ]