Microsoft patches prompt injection flaws in Copilot, North Korea weaponizes deepfakes for crypto theft, and a 200-page global report confirms what we already knew: governance can't keep up