Security researcher identifies prompt injection vulnerability in Microsoft Copilot

Researcher Håkon Måløy demonstrated that hidden, white-text instructions in Microsoft Office documents can manipulate Microsoft Copilot into executing unauthorized commands. While the vulnerability allows for potential AI-worm propagation, the exploit is mitigated by the fact that the hidden text remains detectable via standard document highlighting.