Microsoft confirms an AI worm is propagating through Copilot and other MS apps

Microsoft confirmed reports from Norwegian researcher Håkon Måløy regarding an AI worm spreading through Copilot and other MS apps. Attackers hide malicious instructions in documents used as source material for Copilot-generated Word files. These instructions can alter figures in documents, such as financial reports, and automatically copy themselves into the new files. This mechanism transforms the resulting documents into carriers, enabling the attack to propagate further across various Copilot-assisted workflows and other Microsoft applications.