Researcher demonstrates a self-spreading prompt-injection attack on Microsoft Copilot in Word

A security researcher showed hidden text in a Word file can make Microsoft Copilot carry the instruction into every new document it touches, The Decoder reports.