The Decoder reports a security researcher demonstrated a worm-like attack on Microsoft Copilot that spreads via Word documents.