A researcher showed hidden instructions in a Word file can make Copilot alter a report and infect the next document. Microsoft’s fixes did not close it.