It was suspended after posting inflammatory tweets, and Microsoft blamed a coordinated attack that exploited a vulnerability. Microsoft’s own post-mortem said it had prepared for many types of abuse but made a critical oversight for this specific attack. WikipediaVICE
Prepared for many attacks is not the same as tested against adversaries.
What a red team would have probed before launch:
→ Repeat-after-me style instruction hijacking
→ Coordinated, multi-user pressure on a learning loop
→ Escalation across many turns, not one bad prompt
Would your agent survive its first 16 hours with real users?