Document-borne AI worms can self-propagate through Copilot for Word

Researcher disclosed the technique July 28 after a 144-day coordinated disclosure with Microsoft, which confirmed it March 31. Hidden instructions made Copilot halve every financial figure and copy the prompt into output in white, eight-point text, propagating the attack to new documents — a first for a mainstream productivity suite.