Copilot Prompt Injection Turns Word Docs Into Self‑Replicating Worms
A new prompt‑injection variant lets malicious instructions hidden in a Word file hijack Microsoft Copilot, rewrite the document and embed the same payload into any downstream files. The self‑replicating worm can spread across normal document workflows, exposing enterprises to silent, automated attacks. Microsoft and security researchers are coordinating mitigation.