383
Microsoft confirms an AI worm is propagating through Copilot and other MS apps | CSO Online
(www.csoonline.com)
this post was submitted on 31 Jul 2026
383 points (97.8% liked)
Technology
86879 readers
4100 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
The tl;dr:
Prompt inject a malicious instruction in a word document that instructs the AI to copy this instruction to other documents as part of the payload.
Dumb user downloads and opens the document with copilot enabled, abd ignores the large suspicious white blank page that totally doesnt look like a hidden giant injection attack.
Thats it pretty much it.
Copilot will get injection attacked because the prompt is super huge and at the end of the document, so its prior instructions start to fuzzy out.
Then it'll go "okey doke" and start copying the prompt injection attack payload to a bunch of other documents.
The fix is stupid simple... copilot should just be prompting the user for permission if it ever edits a file other than the one that is open. Im surprised that isnt already the case...?
It certainly is already the case for copilot in vscode.
Considering people's Word formatting skills, a random blank page is not suspicious
Word's interface doesn't help. Default view gives you almost zero information on section breaks, and even if you turn on formatting marks they behave in an unintuitive manner and there's some edge cases where Word will still generate a new page after a continuous section break unless you set the font size after the break to 1.