Hidden prompt turns Microsoft Copilot into an AI worm

Key Takeaways

• A security researcher has demonstrated how Microsoft Copilot for Word can be tricked into spreading a self‑propagating prompt‑injection “AI worm.” The. The technique allows an attacker to hide a JSON‑formatted prompt as white text on a white background inside a Word document.
• When someone asks Copilot for Word to draft or edit content based on that document, Copilot strips away the formatting, reads the hidden text, and tre.