---
id: 20260730-T0-04
title: "微软 Word 出现自我复制 AI 蠕虫，提示注入攻击升级"
title_en: "Self-Replicating AI Worm Found in Microsoft Word via Prompt Injection"
url: https://ai.daily.yangsir.net/daily/20260730-T0-04
issue_date: 2026-07-30
publish_date: 2026-07-29T18:43:03.000Z
category: research
source_name: "Simon Willison"
source_url: https://simonwillison.net/2026/Jul/29/ai-worming-through-word/#atom-everything
---

# 微软 Word 出现自我复制 AI 蠕虫，提示注入攻击升级

安全研究员 Håkon Måløy 发现了一种新型提示注入变种：攻击者可以在 Word 文档中埋藏隐藏指令，当该文档被用作 Microsoft Copilot 的素材时，指令会触发自我复制的蠕虫行为。该漏洞使提示注入攻击从单次执行升级为可自我传播。

## English Version

**Self-Replicating AI Worm Found in Microsoft Word via Prompt Injection**

Security researcher Håkon Måløy discovered a novel prompt injection variant: attackers can embed hidden instructions in Word documents. When used as source material in Microsoft Copilot, these instructions trigger self-replicating worm behavior, escalating prompt injection from single execution to self-propagation.

---

**来源**：[Simon Willison](https://simonwillison.net/2026/Jul/29/ai-worming-through-word/#atom-everything)

**详情页**：https://ai.daily.yangsir.net/daily/20260730-T0-04

---

*智语观潮 · Daily — https://ai.daily.yangsir.net/llms.txt*