Microsoft Copilot for Word vulnerable to self-propagating worm-like attack
Security researcher Håkon Måløy has disclosed a proof-of-concept attack showing how malicious prompts hidden inside Microsoft Word documents can spread between files through Microsoft Copilot for Word. The research suggests that attacker-controlled instructions embedded in one document can be copied into newly generated or edited documents, allowing the attack to persist across normal document workflows. … The post Microsoft Copilot for Word vulnerable to self-propagating worm-like attack appeared first on CyberInsider.
A proof-of-concept attack demonstrated how malicious prompts hidden in Microsoft Word documents can spread through Microsoft Copilot for Word, exploiting the AI assistant's ability to process trusted user instructions and untrusted document content.
Read the full article
This is a curated summary. The complete article is available at Cyber Insider.
