Document-Borne AI Worms Self-Propagate Through Copilot for Word

Document-borne AI worms can self-propagate through Copilot for Word

I demonstrate how hidden instructions in a shared document can trick Copilot for Word into altering content and copying the attack into new files. This creates a self-propagating AI worm that spreads through normal document workflows without further attacker involvement. Despite coordinated disclosure and model upgrades, no robust mitigation currently exists, leaving organizations vulnerable to these silent, document-based attacks.