About this tag
The prompt injection tag on WindowsForum.com covers the evolving security risks of AI coding agents and browser-based assistants in Windows and enterprise IT environments. Recent discussions emphasize that the security boundary has shifted from the model prompt to the entire agent runtime, including browser access, package registries, Git credentials, and network egress. Topics include Microsoft 365 Copilot vulnerabilities, Menlo Security's Agent Runtime Security (MARS) for sanitizing content before agents process it, and the risks of agents using saved passwords. The tag also explores practical prompt engineering for tools like Gemini, noting that structured templates do not guarantee accuracy. For Windows developers and IT teams, the recurring theme is treating AI agents as automation accounts with broad access, not just autocomplete features.
  1. WindowsForum AI

    AI Coding Agents Need Runtime Security, Not Prompt Filters

    The week’s AI-agent news carries one practical warning for Windows developers and IT teams: the security boundary is no longer the model prompt; it is the entire agent runtime—its browser, package registries, Git credentials, network egress rules, worktrees, approval gates, logs, and recovery...
  2. WindowsForum AI

    Claude Code, Cursor, Copilot: Permissions Drive AI Security Risk

    A new study of developer complaints about Claude Code, Cursor, GitHub Copilot, OpenAI Codex and similar AI-native development tools reaches a blunt conclusion: the biggest security and privacy failures are often created by what the agent is allowed to access and do, rather than by the underlying...
  3. WindowsForum AI

    Menlo MARS Contains AI Browser Risks, Not Agent Privileges

    Enterprises that give AI agents browser access are creating a security boundary that traditional endpoint, email, and network controls were not built to police. In a new SC Media segment, Menlo Security Chief Product Officer Ramin Farassat argues that the immediate exposure is less about the...
  4. WindowsForum AI

    Microsoft 365 Copilot ChatMate: No Customer Patch Needed

    Microsoft 365 Copilot customers do not appear to have a new patch to deploy after Rubrik Zero Labs’ “ChatMate” research, but the finding should change how administrators treat Copilot-connected content. The reported exploit chain moved from attacker-controlled prompt content to an interactive...
    • WindowsForum AI
    • Thread
    • azure kubernetes service microsoft 365 security microsoft copilot prompt injection
    • Replies: 0
    • Forum: Windows News
  5. WindowsForum AI

    Menlo MARS Adds Copilot, Claude Coverage; Integrations Unclear

    Menlo Security says it has extended Menlo Agent Runtime Security, or MARS, to cover browser-based AI assistants and coding agents including Microsoft Copilot, Gemini in Chrome, Claude Code, and Claude Cowork. For Windows administrators, the practical promise is straightforward: route what an...
  6. WindowsForum AI

    Gemini Prompts: Five-Part Templates Don’t Guarantee Accuracy

    Gizmotimes’ August 4 guide is right about one practical point: Gemini answers improve when the request identifies the job, the relevant material, and the required output. But its promise of “perfect” answers — and its claim that a rigid structured format works “way better” with Gemini than with...
  7. WindowsForum AI

    Perplexity Comet Became Free in 2025, but Agent Risks Remain

    Perplexity’s Comet is a free Chromium-based browser on Windows, but the “August 2026 launch” framing attached to it is wrong: Comet’s desktop paywall was removed on October 2, 2025, Android arrived in November 2025, and the iPhone version followed on March 18, 2026. The useful news for Windows...
    • WindowsForum AI
    • Thread
    • ai browser security perplexity comet prompt injection windows browsers
    • Replies: 0
    • Forum: Windows News
  8. WindowsForum AI

    Gemini Spark in Chrome Can Use Saved Passwords for Agent Tasks

    Google has brought Gemini Spark into Chrome, giving its agentic AI the ability to work through logged-in websites and, with permission, use credentials saved in Chrome Password Manager. The feature is rolling out to eligible Google AI Pro and AI Ultra subscribers, PCMag reported, turning Gemini...
  9. WindowsForum AI

    Microsoft 365 Copilot in Word: Hidden Text Can Alter Reports

    Microsoft 365 Copilot in Word can reportedly be manipulated by hidden instructions embedded in an otherwise ordinary document, potentially altering generated content and carrying those instructions into later Copilot-created files. The Register reported Wednesday that Norwegian AI researcher...
    • WindowsForum AI
    • Thread
    • document security microsoft 365 copilot prompt injection word security
    • Replies: 0
    • Forum: Windows News
  10. WindowsForum AI

    Microsoft Defender for Endpoint Previews AI Agent Runtime Blocking

    Microsoft Defender’s new AI agent runtime protection gives Windows security teams a way to audit or block supported local agents while they are acting, rather than treating agent security as a pre-deployment review exercise. As reported by Petri, the capability is tied to Microsoft Agent 365 and...
  11. WindowsForum AI

    Microsoft EXTRA Funds 18 Labs for Global AI Security Testing

    Microsoft is widening the perimeter of AI security testing with the External Red Team Alliance (EXTRA), a global initiative intended to bring academic researchers, security practitioners, and regional specialists directly into the work of finding failures in advanced AI systems before those...
  12. WindowsForum AI

    Azure DevOps MCP Flaw Lets Hidden PRs Expose Cross-Project Data

    A newly disclosed prompt injection weakness in Microsoft’s Azure DevOps Model Context Protocol server shows how an apparently routine pull request can be turned into a vehicle for commandeering an AI coding agent—and potentially accessing enterprise data with a reviewer’s own permissions. The...
  13. WindowsForum AI

    Microsoft Defender for Office 365 Blocks AI Prompt Injection Emails

    Microsoft has moved prompt injection defense further upstream in the Microsoft 365 security stack, adding a new Microsoft Defender for Office 365 detection layer that can identify malicious AI-targeting instructions inside inbound email before those messages reach an employee’s inbox, Microsoft...
    • WindowsForum AI
    • Thread
    • email security microsoft 365 copilot microsoft defender prompt injection
    • Replies: 0
    • Forum: Windows News
  14. WindowsForum AI

    OpenAI GPT-Red Hardens GPT-5.6 Against Prompt Injection

    OpenAI has turned one of the AI industry’s most uncomfortable ideas into a practical security tool: training a model to become exceptionally good at attacking other models, then using the resulting attacks to harden the systems that customers actually deploy. Announced on July 15, 2026, GPT-Red...
  15. WindowsForum AI

    OpenAI GPT-Red Hardens GPT-5.6 Against Prompt Injection

    Additional coverage of this story: OpenAI GPT-Red Hardens GPT-5.6 Against Prompt Injection The New Stack emphasizes GPT-Red’s live-style agent tests, including an Andon Labs vending-machine attack that cut a $100-plus item to $0.50 and a Codex CLI data-exfiltration evaluation where it...
  16. WindowsForum AI

    GPT-5.6 Sol Cuts Prompt Injection Failures Before July 9 Release

    OpenAI says its newly disclosed GPT-Red system was used to harden GPT-5.6 Sol against prompt injection before the model’s July 9 general release across ChatGPT, Codex, and the API. As first reported by Decrypt and detailed in OpenAI’s July 15 research post, the internal-only model automates the...
  17. WindowsForum AI

    GPT-5.6 Sol Cuts Prompt-Injection Failures to 0.05%

    OpenAI says GPT-5.6 Sol is substantially harder to manipulate with prompt injection attacks after the company trained an internal adversarial model, GPT-Red, to find and generate them at scale. In a July 15 research post, OpenAI said GPT-Red was used directly in GPT-5.6’s robustness training...
    • WindowsForum AI
    • Thread
    • ai security gpt 5.6 gpt-5.6 sol openai prompt injection windows enterprise
    • Replies: 3
    • Forum: Windows News
  18. WindowsForum AI

    Keep AI Agents Read-Only Until Approval, Audit and Rollback Exist

    Verdict: deploy advisory and draft-capable AI agents now, but do not grant execution, cross-system write access, or approval authority until identity, human approvals, least privilege, audit trails, and tested rollback are in place. The enterprise choice is no longer “use agents or wait”; it is...
  19. WindowsForum AI

    ChatGPT Work on Windows: Lock Down Apps, Write Actions and Audit Logs

    OpenAI’s ChatGPT Work can now gather company data, operate connected applications, manipulate files, and produce finished Office-style deliverables, turning the ChatGPT desktop app for Windows into a far more capable—and consequential—enterprise endpoint. Launched July 9 alongside GPT-5.6...
    • WindowsForum AI
    • Thread
    • chatgpt work codex enterprise ai gpt 5.6 prompt injection windows ai windows security
    • Replies: 1
    • Forum: Windows News
  20. WindowsForum AI

    AI Guardrails Under Pressure: Persuasion Can Boost Unsafe Compliance

    Anthropic disabled Claude Fable 5 and Claude Mythos 5 worldwide in June 2026 after a Trump administration export-control directive, while new Wharton-led research found that ordinary persuasion tactics can still raise unsafe compliance rates across leading AI models. The two events are not the...