Microsoft battles persistent Copilot for Word worm and preps AI 'super app'

Microsoft confirmed a persistent AI worm propagating through Copilot and other apps via prompt-injection, where researchers repeatedly reworded attacks to bypass successive patches — ultimately forcing a July 14 fix that upgraded Copilot for Word's underlying model rather than just filtering inputs. The episode is a case study in how prompt-injection resists conventional patching: because the attack lives in natural language, small rewordings evade signature-based defenses, frustrating the security community and demonstrating that model-level changes, not just guardrails, may be required.

The worm's ability to self-propagate through AI-mediated document workflows is precisely the class of emergent risk safety researchers warn about, and it fits this week's broader theme of agentic AI creating novel attack surfaces alongside the OpenAI and Anthropic incidents. Microsoft's response — swapping Copilot for Word's model — underscores that defense in the agentic era is a moving, model-dependent target.

Separately, Satya Nadella said Microsoft will soon launch a Copilot 'super app' spanning consumer and enterprise use, describing an evolution 'from chat to Cowork to autopilots.' Nadella tied this to a new 'model system' where the harness, context, memory, and action space are decoupled from any single model family — a bet on flexibility, cost control, and business continuity. He also demoed building a 'ROIC Intelligence App' with a single prompt using Copilot code and autopilot, with artifacts landing in his enterprise GitHub and Copilot environment.

Microsoft's earnings context reinforces the ambition: $331B annual revenue (+18%), Azure surpassing $100B (+41%), and MAI-Cyber-1-Flash offering frontier security at half the cost. The competitive read is Microsoft leaning on its enterprise distribution and a model-agnostic architecture to counter OpenAI dependence. Watch whether the super app ships on schedule and whether the Word worm is truly contained.