Researcher demonstrates self-replicating AI worm in Microsoft Copilot for Word
A security researcher has demonstrated a prompt injection attack that turns Microsoft Copilot for Word into a propagation vector for self-replicating malicious instructions. The attack, disclosed on July 28 after a 144-day coordination period with Microsoft, remains exploitable with all current mitigations deployed. How the worm works The attack begins when an attacker hides instructions inside a document, using techniques like white-on-white text. When a victim uses that document as source m
1 min