Copilot worm spreads between Word documents

A researcher demonstrated that hidden instructions in a Word document can cause Microsoft Copilot to alter content and copy the attack into new documents. The worm propagates through normal Copilot-assisted workflows without requiring attacker access to the victim's Microsoft 365 tenant.