PulseAugur
EN
LIVE 13:04:08

Microsoft Copilot in Word vulnerable to self-spreading worm

By PulseAugur Editorial · [3 sources] ·

A security researcher has developed a self-spreading worm that exploits Microsoft Copilot within Word documents. This worm uses invisible prompt injections to automatically spread to new files when they are reused. Microsoft has acknowledged the vulnerability but has not yet provided a fix, despite multiple attempts over several months. AI

IMPACT Highlights potential security risks and the need for robust defenses in AI-integrated productivity tools.

RANK_REASON Demonstration of a security vulnerability in a widely used AI-powered tool.

Read on The Decoder →

AI-generated summary · Google Gemini · from 3 sources. How we write summaries →

Microsoft Copilot in Word vulnerable to self-spreading worm

How we ranked this

Signal score
0 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Demonstration of a security vulnerability in a widely used AI-powered tool.
Source corroboration
3 independent sources
Multiple independent publishers reporting the same story raises confidence that it's real and newsworthy.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
55 days old
Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.
Coverage growth since scoring
+1 source(s) since last score
New sources have picked up this story since our last re-score. Score will update on the next scoring pass.

Full methodology in our editorial standards.

COVERAGE [3]

  1. The Decoder TIER_1 English(EN) · Thomas Joos ·

    A security researcher built a self-spreading worm that hides inside Word docs and hijacks Microsoft Copilot

    <p><img alt="" class="attachment-full size-full wp-post-image" height="1152" src="https://the-decoder.com/wp-content/uploads/2026/07/microsoft_copilot_logo-2.png" style="height: auto; margin-bottom: 10px;" width="2048" /></p> <p> A security researcher has demonstrated a worm-like…

  2. Mastodon — fosstodon.org TIER_1 English(EN) · [email protected] ·

    A self-spreading worm can hide in Word docs and hijack Microsoft Copilot via invisible prompt injections, persisting across reused files. Microsoft has yet to p

    A self-spreading worm can hide in Word docs and hijack Microsoft Copilot via invisible prompt injections, persisting across reused files. Microsoft has yet to patch the issue after 144 days. 🔒 Source: The Decoder AI https:// the-decoder.com/a-security-res earcher-built-a-self-spr…

    LINKS the-decoder.com/a-security-researcher-bui…
  3. Mastodon — mastodon.social TIER_1 Polski(PL) · aisight ·

    Expert Håkon Måløy demonstrated a self-replicating worm that uses Microsoft Copilot to take control of Word documents through a vulnerability

    Ekspert Håkon Måløy zademonstrował samopowielającego się robaka, który wykorzystuje Microsoft Copilot do przejmowania kontroli nad dokumentami Worda przez niewidoczne instrukcje. # si # ai # sztucznainteligencja # wiadomości # informacje # technologia https:// aisight.pl/cyberbez…

RELATED ENTITIES

RELATED TOPICS