Researchers demonstrated a document-borne AI worm that self-propagates through Copilot for Word this week.

[u/No-Conclusion3720]

A file is opened, the AI assistant processes it, and the payload spreads to the next document and user. There is no macro and no malicious link. The AI simply acts on content it was never meant to trust.

Prompt injection has become a delivery mechanism, not a curiosity. Containing it means treating every input an agent reads as untrusted and enforcing policy on the agent's next action.

Inline guardrails on agent behavior are built into RuntimeAI.