Post from 2026-10-18 09:30:21

It seems that MS is pretty nervous about prompt injections[1] to the point where it breaks tool integration by default in their new shiny WinDbg MCP[2].

I'd **love** to see some malware prompt injecting analysts via e.g. strings! Extra points for revealing the malicious prompt in debugger output only, e.g. in a stack trace :)

[1] https://learn.microsoft.com/en-us/windows-hardware/drivers/debuggercmds/windbg-mcp-overview#windbg-mcp-security-and-privacy-considerations
[2] https://github.com/microsoft/WinDbg-Feedback/issues/401
permalink | main