A security researcher built a self-spreading worm that hides inside Word docs and hijacks Microsoft Copilot

A security researcher has demonstrated a worm-like attack on Microsoft Copilot for Word: invisible prompt injections hidden in documents spread automatically into new files every time they're reused. Microsoft confirmed the issue but failed