An AI Worm Has Infiltrated Microsoft Copilot for 144 Days — and Microsoft Still Can't Kill It
A researcher disclosed a vulnerability in Microsoft 365 Copilot in Word at the end of July 2026: hidden instructions in a document (white text on white) are read and executed by the AI. Worse, the worm spreads to other shared documents. Microsoft, informed since March, extended the coordination period to 144 days without fixing the core flaw.
2 août 2026·Équipe Gennn
MicrosoftCopilotcybersécuritéprompt injection
