08/01/2026
A newly disclosed vulnerability shows how prompt injection in Word documents can spread like a digital parasite, no malware required.
Security researcher Håkon Måløy discovered that hidden instructions embedded in Word documents can hijack Microsoft Copilot. No virus. No suspicious attachment.
Just invisible white text that the AI reads but you can't see.
Microsoft patched twice. It still works.
Our article breaks it all down:
→ How the attack actually happens
→ Why Microsoft's fixes didn't stick
→ Exactly what to do to stay safe
If you use Copilot in Word, share docs at work, or know someone who does, this is worth your time.
🔗 Full guide on the first comment
Stay safe, everyone.
