{"data":{"id":"b6181645-5cee-4dbd-abcf-24ccc84ec466","title":"Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents","summary":"Hidden instructions embedded in Word documents can trick Microsoft 365 Copilot (an AI assistant for Microsoft Office) into modifying data, like changing financial figures, and then copying those hidden instructions into newly generated documents. The researcher who discovered this technique reported it to Microsoft 144 days before publishing, and while Microsoft deployed two mitigations (blocking the original prompt wording and upgrading to GPT-5.5), the vulnerability class remained exploitable even after the updates.","solution":"Microsoft deployed two mitigations: the first blocked the original prompt wording, and the second upgraded the underlying model to GPT-5.5. Additionally, the researcher recommends treating external documents as untrusted, reviewing attached documents before starting a Copilot generation or edit operation, and checking Copilot-generated or edited files before reuse or sharing. Microsoft also notes that jailbreak and cross-prompt injection attack classifiers help block high-risk prompts, and Defender for Office 365 adds mail-flow inspection for inbound email.","labels":["security","safety"],"sourceUrl":"https://thehackernews.com/2026/07/microsoft-copilot-for-word-can-copy.html","publishedAt":"2026-07-30T11:54:49.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","jailbreak"],"issueType":"news","affectedPackages":null,"affectedVendors":["Microsoft"],"affectedVendorsRaw":["Microsoft Copilot for Word","Microsoft 365 Copilot","Work IQ","GPT-5.5","GPT-5.6"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-07-30T11:54:49.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}