Microsoft confirms an AI worm is propagating through Copilot and other MS apps

2026-07-31

Researchers demonstrated a document-borne attack that hides instructions inside files processed by Copilot, alters generated content, and copies itself into newly created documents. Microsoft has deployed mitigations, but researchers say the underlying problem remains because current models cannot reliably distinguish untrusted data from executable instructions.