Copilot worm spreads through Word editing workflows

Send us Fan Mail A new class of attack is turning everyday documents into self-propagating threats inside organizations. By abusing how AI tools like Copilot process content, researchers showed how hidden instructions can spread through normal workflows without triggering traditional security controls. This matters because it shifts risk inside trusted systems. Documents are no longer just data. They can act as execution layers when processed by AI, bypassing email filters, endpoint tools, and DLP. At the same time, SBOM updates highlight a growing gap between compliance and real risk reduction, while active attacks on exposed industrial systems show how quickly operational exposure becomes disruption. Also covered: observability shifts toward bring-your-own-cloud models, SaaS misconfigurations as breach vectors, AI-driven command and control, and new pressure on mobile network security. Learn more at https://crestvale.io Support the show