Copilot summarize-url action triggering unexpected assistant behavior change
Detects potential indirect prompt injection attacks against Microsoft Copilot where a 'summarize' action targeting a webpage is immediately followed by suspicious assistant behavior changes such as memory updates, suggesting the webpage content contained malicious instructions.
Microsoft Sentinel (KQL)
