An AI worm vulnerability exploits Copilot as a distribution mechanism and bypasses traditional enterprise safeguards like DLP and email security because the document becomes malicious only when processed by Copilot.