Canopy9560

4 ms·

1. 1.▲
   by Canopy9560 2mo ago

   That is correct. Really, the only "new" thing is the propagation part
2. 2.▲
   by Canopy9560 2mo ago

   Microsoft, and MSRC in particular, have been hands-on and very responsive from the get-go. I think this problem is better viewed as a current LLM technology problem in general. Several mitigations have already been implemented that dramatic
3. 3.▲
   by Canopy9560 2mo ago

   Morris II( https://arxiv.org/abs/2403.02817 ) did demonstrate worming behaviour, so the concept at least is not new. However, I do not know of any similar demonstration in a commercial productivity product like Word.
4. 4.▲
   by Canopy9560 2mo ago

   Author here. This post covers a coordinated disclosure with Microsoft (MSRC) regarding a vulnerability class that allows attacker-controlled instructions in an attached document to hijack Copilot for Word. It manipulates the AI to alter the
5. 5.▲
   Document-borne AI worms can self-propagate through Copilot for Word(enklypesalt.com)

   384 points by Canopy9560 2mo ago|299 comments