Microsoft Copilot for Word vulnerable to self-propagating worm-like attack

Security researcher Håkon Måløy has disclosed a proof-of-concept attack showing how malicious prompts hidden inside Microsoft Word documents can spread between files through Microsoft Copilot for Word. The research suggests that attacker-controlled instructions embedded in one document can be copied into newly generated or edited documents, allowing the attack to persist across normal document workflows. …

The post .