News

• Cloudflare summary logs a typhoon, two earthquakes, power failures, and thirteen government exam shutdowns
• It also identified a fiber cut, drone damage to an AWS region, and a botched DNSSEC key rollover
• The report's sharpest finding is that Tanzania's accidental power blackout looked almost identical in the data to its deliberate election-day shutdown in 2025

Cloudflare has published its latest account of what recently knocked chunks of the Internet offline, and the list reads like a catalogue of everything that can go wrong at once: a typhoon, two earthquakes a minute apart, a national power failure, ten government shutdowns timed to school exams, a fiber cut, drone damage to a cloud region, and a routine cryptographic key update that briefly made every .de website in the world unreachable.

Drawn from traffic telemetry on Cloudflare Radar, it is a useful reminder that the systems most people treat as a utility are held together by a surprisingly small number of things.

With geopolitics in the Middle East shaping traffic in Iran, the UAE, Iraq and Sudan, Cloudflare found that not only did the former's traffic drop even after a shutdown ended two months ago, but the UAE seems to be one of the most affected by the on-again, off-again US-Iran conflict thanks to two AWS facilities being struck by Iranian drones.

Cloudflare's insights tend to make for an interesting read on how the connected world functions, often defying expectations about traffic, online activity, and user behavior, with the recent FIFA 2026 World Cup being an excellent place to start.

When it comes to the most severe disruptions, one would turn to Iran's approach, which cut off internet access during its conflict with the US, an engagement that also had ramifications for most of its Gulf neighbors.

Interestingly, Radar began picking up signs of restoration on May 26 2026, ending an 88-day shutdown that had left the country almost entirely offline since February 28, but it never reached peak pre-conflict levels.

By May 27, traffic had returned to 40% of pre-outage levels, consistent with reports that access was being reintroduced selectively. It has since climbed as high as 90% before settling at roughly 59% of pre-shutdown levels, suggesting that more stringent restrictions may be in effect even as the country grapples with a war that threatens to reignite at a moment's notice.

The most consequential item on the list, as a result of the conflict, is ironically the one that does not look like an Internet outage at all. HTTP traffic to AWS me-central-1, the cloud region in the United Arab Emirates, has remained low, matching AWS status reports at the end of April 2026 stating that the region had been damaged by the conflict in the Middle East and could not reliably support customer applications.

This followed earlier reports in March of physical damage to facilities in both the UAE and Bahrain caused by drone strikes, with two UAE facilities directly hit. It also highlights an interesting insight: A cloud region has become the sort of concentrated dependency that a submarine cable used to be, with the added complication of being a physical target that is much easier to locate than an undersea cable.

The longest single disruption came from Super Typhoon Sinlaku, the strongest storm of the 2026 Pacific typhoon season so far, which tracked through the Mariana Islands in mid-April and passed just north of Guam. The island avoided a direct hit, but tropical-storm-force winds knocked out power, disrupted water systems, and took connectivity with them. Traffic from the territory fell as much as 80% below expected levels on April 13 and 14.

Venezuela lost connectivity on June 24 when two major earthquakes struck northern Venezuela within roughly a minute of each other, at Yumare and San Felipe, followed by an aftershock near the coast outside Caracas, coinciding with a fall in traffic visible across Fibex Telecom, which serves an estimated 1.6 million users.

Three days later, a power outage in Tanzania produced a sharp drop in HTTP traffic lasting at least five hours, with Cloudflare drawing parallels to the country's election-related blackout in 2025.

Saint Lucia lost most of its connectivity on June 21 when traffic on Karib Cable's network fell to essentially zero by 21:00 UTC and remained flat for the better part of a day, reportedly due to a fiber cut near the island. Karib Cable is one of the largest providers there, so the loss was registered nationally, with the country's overall traffic falling by around 60% compared with the previous week.

In terms of a self-inflicted wound, Germany takes the cake: On 5 May, DENIC, the registry for the .de domain, performed a DNSSEC key rollover, the routine periodic replacement of the cryptographic keys used to sign a zone's DNS records, and the process began producing invalid signatures.

Because DNSSEC-validating resolvers only trust answers whose signatures match the current published keys, a mismatch is read as evidence of tampering, so resolvers worldwide rejected every .de lookup and returned errors until normal service resumed at 23:15 UTC. To users, it did not appear to be a cryptographic failure. It presented as German websites not loading, email bouncing, and apps timing out. It resulted in global .de query volume going up during the outage rather than down, indicating that users were, as a result, looking for ways to access said sites, amplifying the failure, at least statistically.

Taken together, Cloudflare's insights about the quarter are less a parade of exotic failures than a fairly consistent argument about concentration.

One registry's keys gate an entire national domain for the whole world. One provider carries enough of Saint Lucia's traffic to take the country with it. One cloud region hosts applications that have no idea they are under attack by a drone strike, causing unintended blackouts. The causes are both ordinary and extraordinary. It is the dependencies, however, that are extreme, making the case for redundancies worldwide.

• Meta rebuilt storage systems after slow data repeatedly stalled expensive AI GPUs
• SSD caching dramatically reduced AI dataset loading times from hours to minutes
• Meta replaced complex metadata lookups with a faster unified storage architecture

Meta says storage systems have failed to keep pace with AI computing power, creating delays that leave costly GPUs waiting instead of processing workloads efficiently.

According to the company's engineers, storage bottlenecks remain a major cause of GPU stalls, increasing operating costs while slowing research progress and extending development timelines.

To address those delays, Meta redesigned its storage architecture, arguing that faster movement of data can unlock greater value from expensive AI hardware investments.

Meta's engineers explained that the company operates hundreds of exabyte-scale storage clusters supporting Facebook, Instagram, Reality Labs, Meta AI, advertising systems, databases, and internal data warehouses.

Those services rely on a foundational storage layer called Tectonic, which manages object storage, file systems, block devices, and data placement across HDDs and SSDs.

The company has increasingly shifted from traditional file storage toward BLOB storage because massive AI datasets require unified access methods with significantly higher performance.

When GPU servers request information from storage, repeated metadata lookups across several layers create latency that interrupts AI training pipelines and delays overall processing.

Meta responded by rebuilding the metadata subsystem into a unified schema backed by ZippyDB while allowing clients to retrieve data directly from storage servers.

Instead of routing every transfer through application servers, the redesigned software uses an embedded client capable of streaming information directly from the Tectonic storage layer.

To support distributed AI deployments, Meta placed regional BLOB-storage systems beside GPU clusters, reducing delays associated with transferring information across distant infrastructure.

It introduced distributed caching using unused GPU host memory, producing an average cache hit rate of 80%, while metadata became accessible within 1 to 2 ms.

The engineers further added hedged reads alongside dynamic concurrency controls, stating that "the new BLOB-storage stack is now capable of serving AI workloads without causing GPU stalls."

Meta examined lengthy delays experienced before AI training even began, when researchers transferred enormous dataset snapshots from BLOB storage into regional GPU facilities.

Instead of loading every dataset directly from slower storage drives, Meta created multiple cache layers that keep frequently used data much closer to GPU servers.

That approach introduced multiple caching layers, using GPU memory as L1, SSDs inside GPU hosts as L2, and regional flash-backed BLOB storage as L3.

Traditional HDD storage remained the authoritative data source, while faster cache layers supplied frequently requested information before slower disks became necessary during processing.

Meta’s redesign produced sharp gains in ingestion speed, cutting a previous 150-minute loading process down to just 10 minutes.

A separate job that once required 89 hours to complete now finishes in just over three hours from start to finish.

Citrini analyst Jukan notes that high-capacity storage has traditionally been judged mainly by its cost per terabyte of capacity alone.

He argues that idle GPU time can outweigh any savings gained from cheaper storage if data arrives too slowly each day.

This suggests that the cost of flash storage is economically rational whenever eliminating idle time costs more than the flash itself each hour.

Via Blocks and Files

I’ve tested dozens of smart glasses for TechRadar, but every time I get a new pair of Meta Ray-Bans to try, I’m reminded why they’re so popular — because yet again my past three weeks with the Ray-Ban Meta Optics have been a joy.

Mostly.

Much like Meta’s previous smart specs, you’ll find a host of technological features crammed into the eyewear.

There are speakers for open-ear audio, which is perfect for listening to casual tunes, taking a call, or hearing the AI’s responses to your queries — with the glasses’ microphones also doing a great job at picking up what you’re saying with minimal noise disruption.

Dedicated earbuds will sound better for sure — the bass isn’t as emphatic as I like with Meta’s Optics glasses (or its other models) — though I did enjoy listening to music through my glasses for hours on end with no major complaints.

As mentioned, there’s also Meta’s AI, which is accessed through the connected phone app and voice commands on your specs. It can answer questions you ask it and, with your permission, see what you see by accessing the Meta Optics’ camera to provide additional context to your questions, and interact with connected apps to play music requests or tell your health and fitness stats.

I’m not a big AI user except when I’m on holiday or just generally acting like a tourist. On our honeymoon, my wife used Look and Ask to check the ingredients on hair care products to make sure she wasn’t allergic, and I got the AI to supply me with phrases to use when I realized my limited Spanish wasn’t going to cut it.

The AI’s also perfect for identifying landmarks and telling you more about historic sites. I relied on it so much on a trip I took to Italy with my other Meta glasses a while ago — it helped me understand the ruins of Pompeii and better learn the history of the Colosseum.

Beyond identifying foreign signs and buildings, the cameras are ideal for first-person video. I used them to snap photos and videos of my wife and me, and they came out really well — they're the ideal way to record memories digitally, as you can still live in the moment rather than being cut off behind a phone screen.

I’ll talk more about cameras in a moment, but before that I want to focus on the key way the Optics is different to Meta’s other Ray-Ban smart specs: it's comfort and fit.

Meta’s smart glasses are chunkier than non-intelligent eyewear, which can make them feel more rigid and less comfortable than regular specs. To make the Optics better suited to all-day wear (something I can confirm they handle effectively after wearing these glasses for hours on end over the past few weeks), you’ll find interchangeable nose pads and adjustable temple tips to help you sculpt them to your face shape.

The correct nose pads have helped the specs sit better on my head without slipping down, while the temple tips can be carefully manipulated (either at home or at an optician) to help the Optics grip your face without applying too much pressure to the sides of your head.

If you’re considering getting some yourself, my final design note is this: pay extra for transition lenses.

The Ray-Bans I’ve been testing are outfitted with the Transitions XTRActive option, meaning they change between clear and shaded when exposed to sunlight — even when I’m in the car — and the lenses changed so quickly as I moved between different environments (something I noticed a lot when going between indoor and outdoor spaces on my honeymoon to Tenerife).

My non-smart eyeglasses boast Transitions Gen S lenses, and I’m also happy with them, or you can opt for polarized Transitions if you want even more light protection, if you’re also willing to pay a bit extra.

Regardless of which type you opt for, Transitions lenses are essential because they maximize the usefulness of your smart specs. Without them, you’re limited to either clear glasses you can only use indoors or on darker days, or shaded glasses that can only be worn outdoors when the sun is brightly shining.

Now, the elephant in the room is that Meta’s smart specs are facing increasing amounts of scrutiny from the public because of their cameras.

News stories showcasing bad actors harassing women, recording secretly by modding their specs, or revealing that Meta contractors might be able to see more of your recorded content than you realize have been populating our timelines throughout 2026.

The upshot seems to be a wave of negativity: I conducted a poll through one of my recent stories, and over half of all respondents said they think smart glasses should be banned.

For its part, Meta is doing plenty to combat these issues: it cracked down on Facebook Marketplace listings for glasses modding services and issued an update to prevent the camera from working if the recording light on your smart eyewear is disabled, and it’s also tackling Instagram profiles belonging to creeps like pickup artists who promote using the glasses to harass people.

I still think more needs to be done on the privacy side of things — at the very least being much more explicit about what features share captured content with Meta, though ideally all of your content would remain private through an Apple-like Private Cloud Compute server setup.

As of now, I’m admittedly very nervous to wear my Meta Optics. I haven’t been worried about going around wearing my Meta Ray-Ban and Oakley specs in the past, but with growing public anger over the way smart specs are being misused, I have a genuine concern someone will see me wearing them and act violently towards me.

Or I could simply be banned from entering a space while wearing them. Some Comic-Cons, offices, and courts don’t let you in wearing Meta-style smart glasses. Especially for something as essential as prescription glasses, and pricey ones at that, being constantly nervous while wearing them or barred from entering certain spaces isn’t ideal.

There is genuinely so much to love about the smart glasses, and if you haven’t yet got a pair and wear prescription eyeglasses, the Meta Ray-Ban Scriber Optics styles are the ones I’d most highly recommend.

It's been a huge week for me here at TechRadar. I managed to convince my boss that it was a good idea for me to sit at my desk for five whole days and play all 200+ games available as part of the Apple Arcade service on my phone.

This article is part of our Ultimate Guide to Apple Arcade: the definitive guide to everything that you need to know about the gaming service. Be sure to browse the full series here.

If it sounds like a ridiculous idea, that's because it really is. Honestly, in my rush to get paid to play some games on my phone, I don't think I actually considered just how long the task would take. That became painfully apparent when I actually started on Monday, and the fact that I was about to spend hours and hours flicking through apps set in.

Still, I managed it — even if the quest ended up sapping up all of my free time. I spent entire evenings lying on the sofa planting crops in Stardew Valley+, whole meals with one finger guiding an escaping explorer in Temple Run Legends, and my hour commute with both eyes glued to Suika Game+ . If I had just one hand free at any given time this week, I was using it to play an Apple Arcade game. Thankfully, I didn't have to drive anywhere.

Now, to be clear, I didn't spend an equal amount of time in all of them. It's easy to sink a few hours into the pixel survival action of Vampire Survivors+, for example, but literal torture to do the same in Play-Doh World (which is basically just a sensory experience for toddlers).

Still, I can now say with confidence which ones are truly worth getting into and, while the following eight picks are by no means an exhaustive list of everything worth playing on the service (just look at the honorable mentions for even more greats), they are the games I've had the most fun with so far and will coming back to time and time again in the weeks and months to come.

Squiggle Drop is one of the biggest surprises I've had while exploring Apple Arcade. It's an easy-to-understand puzzler that has you drawing shapes to complete different objectives and, with basic graphics and a spartan interface, looks like a pretty simple game.

That simplicity is one of its biggest strengths, however. The controls are eminently approachable; just drag your fingers around the screen to draw, and all of the levels have multiple solutions that reward creativity and mean that you never feel like you're truly at a loose end.

There's loads of variety to boot. One mission could have you drawing a container to save a birthday cake from the rain, while another might require a more complex creation to catch an underwater fish.

With more than 250 puzzles (some of which are pretty darn difficult), rotating daily challenges, a raft of achievements to obtain, and even an in-game town that you build as you progress, it's the perfect game to pick up and play when you get a few spare moments in an otherwise busy day.

Lego Star Wars: Castaways is yet more proof that you should never judge a book by its cover (or, I guess, an app by its icon art). What I thought was going to be a generic kids' game turned out to be a really approachable and quite charming MMO.

You create a custom Star Wars hero and drop into a shared hub world that you can explore while surrounded by other real players, before dropping into iconic locations from the movies (explained in-game as a training simulation) to battle waves of Stormtroopers, Tusken Raiders, Battle Droids, and fearsome bosses like Darth Vader either solo or with up to three friends.

There are four character classes to unlock, focusing on ranged laser blaster combat, powerful force skills, team support, and stealth, and they all have meaty upgrade trees in addition to a range of distinct weapons to try. Character customization is also strong, and you can unlock loads of different hats and outfits using currency you obtain by completing quests and missions.

I had a lovely time with it as an adult, but there are some smart safety features that make this a great pick for children as well. Your character name, for example, is chosen from a random selection of suitably Star Wars-sounding words (I foolishly flicked past 'Jar-Jar Skywalker' when it popped up as an option) and numbers. There's also no direct text or voice chat function, though you can communicate through a small selection of emotes.

Angry Birds is a game that needs no introduction. This legendary early App Store sensation spawned countless sequels, spinoffs, theme park rides, a TV show, and even two popular animated films with a third set to release later this year.

Reloaded is basically the definitive Angry Birds game, bringing together the levels from the classic Angry Birds and its sequels Angry Birds Seasons, Angry Birds Space, and Angry Birds Stella (the latter two aren't even available on the App Store in their original forms anymore, making this the only way to officially play them) in addition to loads of new ones.

It offers the classic bird-slinging action that made the series so popular, now spruced up with shiny new graphics that look lovely even blown up on a big screen. All of the new content means that it's a joy to dip into even if, like me, you completed all of these games back in the day.

For newcomers, it's the absolute best that the series has ever been, with the best-looking graphics, all the greatest levels, and absolutely no ad interruptions. Get it downloaded, and find out why it was such a hit.

If after a busy day you just want to kick back and escape to a fantasy world, then Disney Dreamlight Valley is for you. This life simulator thrusts you into a magical town filled with iconic Disney characters that has fallen into disarray. A mysterious malevolent force is taking over in the form of dark roots that sap away memories, and it's up to you to get rid of them all and restore everything to its former glory.

From relaxing farming to designing your own cute cottage and customizing your outfits, everything here seems designed to bring nothing but the most chill vibes. There's a good sense of progression as new areas are steadily unlocked while you play, bringing the worlds of new Disney franchises into the mix.

On that note, it's hard to overstate the joy of interacting with some of the company's best characters. I've never been a massive fan of Mickey Mouse, Donald Duck, or Goofy, but even I can't stop myself from smiling when I unlock childhood favorites like Ratatouille's Remy, Wall-E's Eve, or Peter Pan's Tinker Bell.

Although you can pick up Dreamlight Valley on other platforms, the Arcade Edition comes packed with all of the latest free updates and access to the biggest paid expansions at no extra cost. It looks great and controls well on a phone, too.

The Arcade Edition of Sid Meier's Civilization 7 is the real deal, bringing all the strategic brilliance of the latest Civilization game to mobile with few real compromises aside from some missing DLC.

If you're unfamiliar with the franchise, it tasks you with building and governing a historical society from the ground up in a randomly generated world. You build cities, conquer territory, develop new technology, and interact with other competing societies. Whether you form trade alliances and live peacefully alongside your neighbours or wage war is entirely up to you.

Unlike past games, Civilization 7 added the ability for your empire to evolve, giving you the choice to swap between different cultures for unique bonuses, special buildings, or exclusive units.

The level of depth here is simply unparalleled in the mobile space, and as games can take tens of hours at a time, it's great to be able to take it all on the go.

Taiko no Tatsujin is a name you'll recognize if you've even been to an arcade in Japan. It's a simple but addictive rhythm game all about hitting a big drum in time with the beat, a gameplay perfectly suited for a touchscreen.

Tap either side of the on-screen drum in time with the blue icons or either side of the middle for the red ones, with bigger notes needing both sides at once. It starts off simple, but as the difficulty ramps up, beats that you have to hold are introduced, alongside ones that have you hammering the screen as quickly as possible with your fingertips.

The song selection is brilliant if, like me, you love Japanese music with a good mix of J-pop hits, Vocaloid classics, and music from popular anime. If that's not your speed, there are plenty of original songs, a whole load of classical music, a few tracks from Western blockbusters like Indiana Jones, plus viral sensations such as Baby Shark.

Nothing quite compares to the joy of mastering a song and, with so many to choose from and a wide range of difficulty levels to beat, Taiko no Tatsujin Pop Tap Beat is almost impossible to put down.

What if I told you the best new 3D Sonic the Hedgehog game of the last decade was an Apple Arcade exclusive? It sounds hard to believe, but Sonic Dream Team is so good that I would recommend it even if you're not a Sonic the Hedgehog fan.

This 3D platformer has the iconic blue hedgehog navigating a series of dense worlds with impeccable dream-like visuals, hopping between floating platforms, boosting your way down high-speed rails, and dispatching enemies with homing attacks. The action certainly isn't as fast as some of the 2D Sonic the Hedgehog games, but the precise controls mean that it feels excellent nonetheless.

It's not the longest experience on Apple Arcade, lasting just a couple of hours, but it is highly replayable with six swappable characters (including a rare Cream the Rabbit appearance), each with their own distinct pacing and unique roster of abilities to experiment with, a ranking system to chase high scores, tricky challenge stages, and unlockable powers.

There are also loads of collectibles to seek out, so true completionists have plenty to chip away at even after the credits have rolled.

If I were forced to pin down one overall favorite among everything that I played this week, then What the Golf? is the obvious choice.

It's an unapologetically ridiculous physics-based game that is only really about golf in the loosest sense. Levels are incredibly creative, and no two are the same, having you putt everything from hot dogs and cars to live horses and entire houses into the hole.

It's consistently surprising and endlessly amusing, with mechanics and even the game's perspective shifting on a level-by-level basis. It's all underpinned by an expressive, minimalist art direction, a sleek interface, upbeat music, and a barrage of punny humor. The brilliant use of haptics also deserves some credit, giving everything you punt a distinct feeling of weight to it.

In addition to a lengthy main campaign, there is a generous selection of daily courses, bonus episodes, special events, online leaderboards, and more. Indie game fans will recognize loads of crossovers and references, too. It's nothing short of a joyous time.

I wanted to keep my recommendations concise and varied, with a good mix of genres, art styles, control methods, and so on represented. That doesn't mean that I don't have loads more recommendations, though, so here are some more strong picks that didn't quite make the full list for one reason or another.

• Fantasian is a sprawling RPG adventure with a beautiful miniature art direction.
• Monument Valley+ and Monument Valley 2+ are two stunning indie puzzle games that play with perspective in interesting ways.
• NFL Retro Bowl '26 offers a surprisingly meaty football simulator delivered through charming pixel-art graphics.
• Stardew Valley+ combines relaxing farming with social simulation as you build relationships with a cast of memorable characters in a cozy town.
• Suika Game+ has you merging different fruits in an easy-to-understand puzzler that's taken the internet by storm.
• Puyo Puyo Puzzle Pop is an exclusive entry in the long-running Puyo Puyo series that's filled with its trademark Tetris-like puzzle battles.
• MySims and MySims Kingdom are both expansive, feature-complete ports of classic The Sims spinoff games.
• Vampire Survivors+ brings the viral wave survival game to mobile — be warned that hours can vanish in the blink of an eye.

• Instructions hidden as white text in a Word document can make Microsoft 365 Copilot silently alter the file it is drafting and copy the instructions into the output
• Each poisoned document becomes a carrier, so the attack spreads through ordinary internal workflows without the original malicious file and needs no macros, malware, or code execution
• Microsoft has shipped two mitigations across a 144-day disclosure, including a model upgrade, and the attack was still reproducible by the researcher

A security researcher has published a proof of concept showing that instructions hidden inside a Word document can cause Microsoft 365 Copilot to silently alter the file it is drafting, then copy those same instructions into the finished document, so the next person to use it becomes a carrier too.

Håkon Måløy, a data scientist with a doctorate in applied machine learning, disclosed the technique as the third installment of his Context Collapse series, after a 144-day coordinated disclosure with the Microsoft Security Response Center.

The reason this is being reported ahead of a fix is that it still works despite multiple attempts by Microsoft, as he notes that no robust mitigation for the broader vulnerability class is currently available.

The underlying attack belongs to a family known as cross-domain prompt injection, or XPIA. An attacker writes instructions in a natural-language document, formats them as white text on a white background at a small point size, and shares the file.

Because Copilot for Word strips formatting before passing text to the underlying language model, the model reads text the human never sees. This is true even for documents that are not opened by the user on purpose: The attack can trigger either when a user manually attaches a document to Copilot or when Copilot, working in Work IQ mode, searches the user's OneDrive for relevant files and finds the malicious one on its own.

It is also more dangerous than other exploits because of one key element: propagation. The hidden prompt in Måløy's proof of concept had two parts. One instructed Copilot to alter the document being drafted, in his demonstration halving every financial figure in a quarterly report.

The other instructed Copilot to copy the prompt into the new document and conceal it, framed innocuously as source tracking and readability formatting. Copilot did both, appending the instructions in white text and mentioning neither action to the user.

The disclosure timeline is the most uncomfortable part of the report. Måløy reported to MSRC on March 6 2026. Microsoft confirmed the behavior on March 31 and shipped a first mitigation in early April via a reworked Edit with Copilot experience, which successfully blocked his original prompt wording. He reproduced the attack with different wording the same week, and a second case was opened.

The second fix, on July 14, consisted of upgrading the underlying model to GPT-5.5. Måløy broke it the following day using GPT-5.6, then voluntarily offered Microsoft a further two-week delay to attempt another mitigation. The class still reproduced on the disclosure date, indicating that although a fix is in the works, the exploit is still possible to run.

The issue goes far beyond Microsoft Word: an AI assistant must ingest untrusted content to determine whether it is relevant or hostile. But the content enters the same context window as the system prompt and the user's actual request, so by the time the model evaluates whether the text is an attack, the attacker's tokens have already shaped that evaluation.

As Måløy puts it, "the content being inspected participates in the act of inspection."

Microsoft confirmed it had reviewed the findings in a statement to The Register but stopped short of indicating a timeline for a complete fix:

“We have addressed the findings reported by the researcher and thank them for working with us through coordinated vulnerability disclosure," the company said.

"To address this class of risk, we use a defense-in-depth strategy with safeguards that block malicious instructions at multiple points and help keep tasks aligned with users’ requests. We are continuously strengthening these safeguards as the technology and threat landscape evolve. We encourage customers to install the latest updates, use multiple layers of security protection, treat content from unknown sources with caution, and review AI-generated content before using or sharing it.”

Måløy's recommendations are to treat externally sourced documents as untrusted when using them with Copilot, review attachments before starting an AI-assisted draft, and review Copilot's output carefully before sharing or reusing it.

He also suggested that generated documents should carry provenance metadata that records source material and model edits, which would not prevent injection but would make an infection traceable after the fact.

With Copilot extending further into agentic products that create and manipulate documents with less human oversight, the scope of how exploits like this could affect workflows (and users) will widen rather than narrow, and a complete solution is not yet in sight.