Microsoft’s New Update Creates an Agentic OS Infostealer Attack Vector

This document contains an embedded prompt-injection payload (white-on-white hidden text) that instructs an AI agent to locate sensitive credentials (passwords, API keys, private keys, seed phrases) across local apps and post them to an attacker-controlled webhook; it also references Microsoft guidance on prompt-injection/XPIA and indirect prompt injection as context.