MSRC

Microsoft's Security Response Center assessed an indirect prompt injection into Security Copilot as Low severity, reasoning that consequential action still required downstream automation or human approval. Security researchers are pushing back, arguing that rationale becomes untenable as AI systems are increasingly designed to perceive, reason, and act autonomously, with less human oversight built in.