{"data":{"id":"4adc4316-b084-4dc6-bd1d-589ff6da072a","title":"Copilot worm can spread through Microsoft Word docs","summary":"A researcher discovered an 'AI worm' that can spread through Microsoft Word documents by hiding malicious instructions in files that Copilot (an AI assistant) uses as input. When Copilot processes these documents, the hidden instructions execute and copy themselves into newly generated documents, creating a self-propagating attack that bypasses traditional email security because the document only becomes malicious after the AI processes it.","solution":"Microsoft stated they have 'addressed the findings' and use 'a defense-in-depth strategy with safeguards that block malicious instructions at multiple points.' The company also recommended that customers 'install the latest updates, use multiple layers of security protection, treat content from unknown sources with caution, and review AI-generated content before using or sharing it.' According to the researcher, Microsoft implemented 'multiple small focused mitigations' since March, though the core vulnerability has not been fully fixed.","labels":["security","safety"],"sourceUrl":"https://www.csoonline.com/article/4203630/copilot-worm-can-spread-through-microsoft-word-docs.html","publishedAt":"2026-07-31T01:13:39.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection"],"issueType":"news","affectedPackages":null,"affectedVendors":["Microsoft"],"affectedVendorsRaw":["Microsoft Copilot","Microsoft Word"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-07-31T01:13:39.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}