AI Worms in Word: How Document-Borne Threats Self-Propagate

AI Worms in Word: How Document-Borne Threats Self-Propagate Meta Description: Document-borne AI worms can self-propagate through Copilot for Word, creating a new attack surface. Learn how these threats work and how to protect yourself. TL;DR: Researchers have demonstrated that malicious instructions embedded in documents can hijack Microsoft Copilot for Word, causing it to replicate harmful content, exfiltrate data, and spread the attack to new documents automatically — all without the user clicking a single suspicious link. This isn't theoretical anymore. Here's what you need to know and what you can do about it right now. Key Takeaways Document-borne AI worms exploit a technique called prompt injection to hijack Copilot for Word's generative AI capabilities These worms can self-propagate by instructing Copilot to embed malicious instructions in any new documents it generates or summarizes Sensitive data — including email addresses, financial figures, and personal information — can be silently exfiltrated during normal document workflows The attack requires no malware installation and can bypass traditional antivirus tools entirely Microsoft has issued guidance but the fundamental architectural challenge remains unsolved as of mid-2026 Practical defenses exist today, including document hygiene practices, access controls, and third-party AI security tools What Are Document-Borne AI Worms? If you've been following cybersecurity news, you've probably heard the term "prompt injection" thrown around. But document-borne AI worms take that concept to a genuinely alarming new level. Instead of just tricking an AI into saying something it shouldn't, these attacks can turn Microsoft Copilot for Word into an unwitting accomplice that spreads malicious instructions across your entire document ecosystem . The core idea is deceptively simple: an attacker embeds hidden instructions — often in white text on a white background, in metadata, or inside document comments — that Copilo