security: ASCII smuggling crosses over from AI prompt injection to phishing evasion
Microsoft Security Blog
2026-09-03
Microsoft reports that invisible Unicode characters, previously used in AI prompt injection, are now being used to hide words from email filters as part of phishing evasion. The technique relies on obfuscating text before parsers process it.