The second is an indirect prompt attack, say if the email assistant follows a hidden, malicious prompt to reveal confidential data. Microsoft safeguards against both types of prompt attacks with AI ...