A new self-replicating prompt injection attack targets Microsoft Copilot for Word. Security researcher Håkon Måløy demonstrates how hidden instructions in source documents can manipulate edits and propagate malicious payloads into newly generated files. This self-propagating vector highlights a severe vulnerability class in AI-assisted document workflows that lacks a complete vendor mitigation.
Opening Kapyn…