
A security researcher built a self-spreading worm that hides inside Word docs and hijacks Microsoft Copilot
A demonstrated agent exploit — invisible prompt injections that propagate across documents and compromise Copilot's autonomy — exposes a critical reliability and security gap in deployed agentic systems. This is the kind of failure mode that will determine whether agents scale in enterprise.
Why it ranks · · Self-spreading worm embeds invisible prompt injections in Word documents · August 2026
Read full story