{"data":{"id":"614b46f0-d017-48df-9243-d6943eedc0a8","title":"Microsoft confirms an AI worm is propagating through Copilot and other MS apps","summary":"Researchers discovered an AI worm that spreads through Microsoft Word and Copilot by hiding malicious instructions in documents, which then self-replicate when Copilot processes those documents in new workflows. The worm bypasses traditional security defenses like email filters and data loss prevention (DLP, tools that stop sensitive information from leaving a company) because it becomes malicious only after Copilot processes it, not when the document arrives. Microsoft has implemented multiple small targeted fixes since March, but confirms the core vulnerability remains unfixed.","solution":"Microsoft stated they \"use a defense-in-depth strategy with safeguards that block malicious instructions at multiple points.\" The company also recommends that \"customers install the latest updates, use multiple layers of security protection, treat content from unknown sources with caution, and review AI-generated content before using or sharing it.\" Additionally, the source notes that \"mitigations can meaningfully reduce the demonstrated attack surface, making attacks less reliable and limiting their reach, even without completely eliminating the underlying problem.\"","labels":["security","safety"],"sourceUrl":"https://www.csoonline.com/article/4203630/microsoft-confirms-an-ai-worm-is-propagating-through-copilot-and-other-ms-apps.html","publishedAt":"2026-07-31T01:13:39.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","model_poisoning"],"issueType":"news","affectedPackages":null,"affectedVendors":["Microsoft"],"affectedVendorsRaw":["Microsoft","Copilot","Word"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-07-31T01:13:39.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}