2026-08-01
A security researcher has demonstrated a worm-like attack on Microsoft Copilot for Word: invisible prompt injections hidden in documents spread automatically into new files every time they're reused. Microsoft confirmed the issue but failed to fix it after 144 days and two attempts.<br /> The article A security researcher built a self-spreading worm that hides inside Word docs and hijac [...]