Enklypesalt (auto-discovered)

A security researcher demonstrated that AI worms can self-propagate through Microsoft Copilot for Word by hiding malicious instructions in documents, which Copilot then copies into new documents durin…

Microsoft has issued CVE-2026-55145 for cross-domain prompt injection vulnerabilities in Microsoft 365 Copilot that allowed attacker-controlled email body content to influence Copilot responses, fabri…