CopilotワームがWord文書経由で拡散—Microsoftは2回の修正にも失敗
研究者のHåkon Måløy氏は、Word文書に潜むMicrosoft Copilot向けの自己拡散ワームを作成した。2回の修正失敗の後、144日間にわたる放置は、プロンプトインジェクション対策の難しさを浮き彫りにしている。
security researcher håkon måløy created a self-spreading worm targeting microsoft copilot by hiding instructions in white text within word documents; when copilot processes the file, it executes the hidden commands and copies them into new documents, creating a chain of infection. microsoft acknowledged the flaw on march 31 and attempted two fixes that failed, leaving the vulnerability active for 144 days without a patch. the attack vector specifically risks enterprises that rely on copilot for data processing, as a single compromised file from the internet could manipulate internal reports and spread across the network. the existence of this worm validates industry concerns that prompt injection is a critical, unsolved security problem for generative ai adoption.