Microsoft Copilot for Word can be exploited to copy hidden instructions from a malicious document into new files. The vulnerability allows Copilot to mistake hidden instructions for user requests, potentially leading to data manipulation. While Microsoft has deployed mitigations, the attack remains exploitable, and user vigilance is recommended when handling external documents.
https://thehackernews.com/2026/07/microsoft-copilot-for-word-can-copy.html