Copilot Just Got Its First Real Worm. The Story Isn't the Worm.
Håkon Måløy's coordinated disclosure of a document-borne AI worm in Microsoft Copilot for Word isn't a vulnerability story. It's a product-class story. The 144-day disclosure, the failures of two model upgrades to close the class, and the propagation primitive baked into the workflow Microsoft is selling as the future of work.
Read More