Field notes from the edge.
What our engineers learned this week. Hands-on technical deep-dives, postmortems, and strategy frameworks.
AIMicrosoft Copilot for Word Can Copy Hidden Prompts Into New Documents
A security researcher disclosed a vulnerability in Microsoft 365 Copilot for Word where hidden instructions embedded in documents can manipulate AI-generated content and self-propagate into newly created files. The technique, reported to Microsoft 144 days prior to public disclosure, demonstrates how malicious prompts can persist across multiple document generation sessions, potentially compromisi
AIOne-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes
Security researchers at Varonis Threat Labs discovered a critical vulnerability chain called SearchLeak that could allow attackers to exfiltrate sensitive data from Microsoft 365 Copilot Enterprise Search through a single click on a legitimate Microsoft domain link. The attack bypassed traditional security controls because it used authentic microsoft.com URLs, making it difficult for anti-phishing
AINo longer just a Copilot, Microsoft's AI wants to take the wheel
Microsoft has introduced 'Autopilot,' a new category of autonomous AI agents that work continuously in the background without prompting, starting with Scout. Unlike Copilot's assistive approach, Scout operates across Microsoft 365 applications to proactively manage tasks like scheduling, deadline tracking, and meeting preparation, though it's currently in limited preview and raises security concer
AIMicrosoft Excel champ proves he still has the formula
Competitive Microsoft Excel has evolved into an esports-style competition, with the latest tournament in Amsterdam featuring a €12,500 prize pool and multiple event formats. Reigning champion Diarmuid Early of Ireland dominated the competition, winning three trophies and securing direct seeding to the 2026 World Championship semifinals in Las Vegas. The growing Excel esports circuit highlights the