enforcement gaps

Microsoft’s Copilot has quietly breached its own promise: for the second time in eight months the assistant’s retrieval pipeline processed data explicitly labeled as confidential, and — crucially — no existing DLP, EDR, or WAF in the conventional security stack raised an alert. Background...