Mike Fitzpatrick
@ncxceo
·
Aug 3
A Copilot AI worm can now self-propagate through Word docs.
The document arrives clean. Copilot processes it, follows the hidden instructions, and writes them into the next file.
No code executes. No email filter catches it. The carrier is a legitimate internal document.
Microsoft has partial mitigations. The core vulnerability is unresolved.
Full breakdown:
Copilot worm can spread through Microsoft Word docs
https://www.csoonline.com/article/4203630/copilot-worm-can-spread-through-microsoft-word-docs.html
Although there are a few ways to mitigate the risk, the only way to block it is to get AI to differentiate instructions from data, which is impossible today.