Self-propagating AI worm through Microsoft Copilot for Word documents

8.8Weirdness

Why It Matters

Needs editorial pass.

Evidence

enklypesalt.com blog post (Jul 28, coordinated with MSRC), HN top story (~46 pts, very recent). PoC demo of hidden prompt in shared doc triggering Copilot (via RAG indexing) to alter content (e.g., financial numbers) and embed the full worm prompt in new outputs, spreading via normal enterprise workflows like SharePoint/Teams without obvious vector.

Signal Read

Novelty: 9Receipts: 9Story voltage: 9Heat: 8

Source Trail

Daily scan: 2026-07-29