Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents
Summary
A security researcher discovered that Microsoft 365 Copilot in Word can inadvertently copy hidden instructions into new documents. This technique allows the AI to rewrite figures in a report, with the hidden prompts then being embedded into the final output.
IFF Assessment
FOE
This vulnerability allows for the potential exfiltration of sensitive instructions or unintended manipulation of documents by an AI, posing a risk to data integrity and confidentiality.
Defender Context
This highlights the need for careful review of AI-generated content, especially when sensitive information or instructions are involved. Defenders should be aware of how AI models might process and replicate hidden metadata or prompts within documents.