Summary

Researcher says months of coordination with Microsoft have yet to produce a robust mitigation UPDATED Watch out for untrusted documents. According to research, an attacker can hide malicious instructions in a Word document that, when included in Copilot for Word’s context, may alter document output and copy the instructions into newly created files that use the affected document as source material, without the victim noticing.

AI summaries can be wrong sometimes—always verify important details using the source article.