The one that matters
The Word document that attacks your Copilot
A researcher shows a document-borne prompt injection that self-propagates through Copilot for Word: hidden instructions in one file get Copilot to copy them into the documents it helps produce, spreading attacker control from file to file. No malware, just text.
Why it matters
Prompt injection has mostly been a single-target nuisance. Self-propagation turns it into an epidemic model: any assistant that reads shared documents can become a carrier. If you're wiring AI into document workflows, this is the failure mode to design against.
