A self-replicating prompt-injection worm in Word's Copilot
Researcher Håkon Måløy detailed a prompt injection that, via Copilot in Microsoft Word, copies hidden instructions into new files — turning them into fresh carriers. Disclosed to Microsoft 144 days ago, still without a full fix.
