Self-propagating AI worm through Microsoft Copilot for Word documents

Why It Matters

Needs editorial pass.

Evidence

enklypesalt.com blog post (Jul 28, coordinated with MSRC), HN top story (~46 pts, very recent). PoC demo of hidden prompt in shared doc triggering Copilot (via RAG indexing) to alter content (e.g., financial numbers) and embed the full worm prompt in new outputs, spreading via normal enterprise workflows like SharePoint/Teams without obvious vector.

Sources

Daily scan: 2026-07-29

• enklypesalt.comhttps://enklypesalt.com/posts/context-collapse-part3-ai-worming-through-word/