一种新型AI蠕虫已被发现，它可以通过Microsoft Word文档利用Copilot进行自我传播。该蠕虫利用了提示注入漏洞，即文档中的隐藏指令被Copilot解释为用户命令。这会导致Copilot修改文档，然后将恶意指令复制到新文档中，使其成为进一步传播的载体。尽管Microsoft已被告知并有144天的协调期，但目前尚未提供完整的缓解措施，建议用户在使用Copilot时谨慎对待来自外部来源的文档。 AI
影响 这一发现突显了AI驱动工具的新攻击向量，可能影响企业安全和用户对AI助手的信任。
排序理由 在AI驱动的生产力工具中发现了一种新颖的漏洞。
在 Mastodon — mastodon.social 阅读 →
AI 生成摘要 · Google Gemini · 来自 6 个来源。 我们如何撰写摘要 →
完整方法见我们的编辑标准。
<p><strong><a href="https://enklypesalt.com/posts/context-collapse-part3-ai-worming-through-word/">AI Worming through Word</a></strong></p> Neat new prompt injection variant by Håkon Måløy, who found a way to upgrade prompt injection attacks against Microsoft Word to full self-re…
Document-borne AI worms can self-propagate through Copilot for Word https:// enklypesalt.com/posts/context- collapse-part3-ai-worming-through-word/ # ai
Document-borne AI worms can self-propagate through Copilot for Word https:// enklypesalt.com/posts/context- collapse-part3-ai-worming-through-word/ # ai
Copilot will propagate a malicious worm from one Word document to another https://enklypesalt.com/posts/context-collapse-part3-ai-worming-through-word/ # Security # AI # Malware
Document-borne AI worms can self-propagate through Copilot for Word https://enklypesalt.com/posts/context-collapse-part3-ai-worming-through-word/ # HackerNews # Tech # AI