Copilot Worm Demonstrates Self-Propagating Prompt Injection in Word Documents

01The Mechanics of Document-Borne AI Worms

Reported by a Norwegian AI researcher and confirmed by Microsoft, an attacker can conceal malicious instructions inside a Word document. When Copilot processes this document as source material (e.g., input for a financial report), the instructions can alter figures and append themselves to the output document.

02Enterprise Security Implications

Industry experts note that this attack pattern bypasses traditional security controls:

• Email Security: Bypassed because the delivery document appears legitimate.
• Data Loss Prevention (DLP): Exfiltration occurs via the user's authenticated session.
• Endpoint Protection: No traditional code executes; the AI service simply follows hidden text instructions.

03Vendor Mitigations and Future Fixes

Microsoft confirmed a defense-in-depth strategy, deploying multiple safeguards to block malicious instructions. However, security experts emphasize that solving the underlying instruction-data confusion at the model level remains an industry-wide challenge.