Coverage of Håkon Måløy disclosure: hidden instructions in Word docs alter Copilot output and self-copy into new files. 144-day coordinated disclosure with Microsoft; two mitigations including model upgrade did not close vulnerability class. Payload withheld. Example: compromised market analysis → manipulated financial report that becomes new carrier. Microsoft points to defense-in-depth and user caution.