VulnWatch VulnWatch
← Back to dashboard
Unknown rss_thehackernews · rss_691699a9f32a9b7a1253bc2e2f32efbe

Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents

Published Jul 30, 2026

Hidden instructions in a Word document can make Microsoft 365 Copilot rewrite figures in a report, then copy the same instructions into the finished file. Håkon Måløy disclosed the technique on July 28, 144 days after reporting it to Microsoft.

In his proof of concept, the internally generated file triggered the same behavior when it was used in a second Copilot drafting session.

Måløy's

Affected AI Products

copilot
Get the weekly digest. Every Monday: top AI security stories of the week. Free.