[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMnCW0Cl389RSagNXWK4kiAN2hlqo4AaUgoqXi1bdA2Y":3},{"article":4,"iocs":55,"watch_terms":56,"solutions":57,"lesson":143},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"05c0e8c8-bcc0-439d-b640-5244cd44db80","Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents","microsoft-copilot-for-word-can-copy-hidden-prompts-into-new-documents-691699","Hidden instructions in a Word document can make Microsoft 365 Copilot rewrite figures in a report, then copy the same instructions into the finished file. Håkon Måløy disclosed the technique on July 28, 144 days after reporting it to Microsoft. In his proof of concept, the internally generated file triggered the same behavior when it was used in a second Copilot drafting session. Måløy's","A security researcher discovered a technique where hidden instructions within a Word document can cause Microsoft 365 Copilot to alter figures in a report and then embed those same instructions into the final document. While Microsoft has deployed mitigations, the vulnerability class reportedly remains exploitable, allowing for the manipulation of document content and the concealment of malicious prompts.","Microsoft 365 Copilot can copy hidden instructions into new documents, rewriting figures and concealing prompts.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F07\u002Fmicrosoft-copilot-for-word-can-copy.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEi-BgxoTGLqXYzQh4HW0TUm-hbX0ApFizzFtFkKe5mb3fKS_yn6Zzpj_Uvivxi7VCwEUOuJx3Bg1XHpHWq9tbZh5xBrAHT4gBG2DYyqvFkVKmWIRiF_zCpXIG5bTs7HfsV1pjM2EsTm-e7WttN-iB57p0n4ki2Vs7vXyB6rTF9mSqlwPu3h7KHocg0mWcI\u002Fs1600\u002Fcopilot-word.jpg","2026-07-30T11:54:49+00:00","2026-07-30T14:00:07.686263+00:00",8,[17,20,22,25,28,30],{"name":18,"type":19},"Microsoft 365 Copilot","product",{"name":21,"type":19},"Word",{"name":23,"type":24},"Microsoft","vendor",{"name":26,"type":27},"GPT-5.5","technology",{"name":29,"type":27},"GPT-5.6",{"name":31,"type":19},"Work IQ","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":32,"icon":34,"name":35,"slug":36},null,"Vulnerabilities","vulnerabilities",[38,43,45,50],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":44},{"id":32,"icon":34,"name":35,"slug":36},{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[23,18,21],{"controls":58,"vendors":139},[59,87,112],{"slug":60,"name":61,"problem":62,"products":63},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[64,72,80],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"vendor_slug":81,"vendor_name":23,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"slug":49,"name":88,"problem":89,"products":90},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[91,99,107],{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":108,"product_name":109,"url":110,"description":111},"boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"slug":113,"name":114,"problem":115,"products":116},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[117,124,132],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":118,"product_name":121,"url":122,"description":123},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":113,"product_name":136,"url":137,"description":138},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",[140],{"slug":81,"name":23,"logo_path":82,"roles":141},[142],"affected",{"slug":144,"title":145,"body":146,"framework_refs":147,"framework_notes":157},"hidden-prompts-in-word-docs-manipulate-microsoft-copilot-output","Hidden Prompts in Word Docs Manipulate Microsoft Copilot Output","This vulnerability exploits a prompt injection technique, where malicious instructions hidden within a Word document hijack Microsoft 365 Copilot's AI behavior, causing it to silently alter document content such as financial figures and then propagate the hidden instructions into newly generated documents. The root issue lies in the AI model's inability to reliably distinguish between trusted user instructions and untrusted content embedded in processed documents. This matters because users may unknowingly trust AI-generated summaries or reports that have been silently tampered with, creating serious risks for business decisions, financial reporting, and document integrity. The self-propagating nature of the embedded prompts also means the attack can spread across an organization's document ecosystem without detection.",[148,149,150,151,152,153,154,155,156],"NIST AI RMF: GOVERN 1.2 – Policies for AI risk management","NIST SP 800-53 SI-10 – Information Input Validation","NIST SP 800-53 AU-2 – Audit Events \u002F Logging","CIS Control 3 – Data Protection","CIS Control 7 – Continuous Vulnerability Management","CIS Control 8 – Audit Log Management","MITRE ATLAS AML.T0051 – Prompt Injection","GDPR Article 5(1)(f) – Integrity and Confidentiality of personal data","ISO\u002FIEC 42001 – AI Management System Standard",{}]