Microsoft’s Copilot for Microsoft 365 briefly did exactly what it was built to do — read, understand and summarise email content — and in doing so it accidentally summarised messages that organizations had explicitly labelled Confidential, exposing a gap between AI convenience and longstanding...
Microsoft’s Copilot Chat quietly summarized emails labeled “Confidential,” bypassing the data‑loss protections administrators relied on and forcing a hard assessment of how AI features must be governed inside Microsoft 365...
Microsoft's enterprise Copilot assistant has been quietly processing and summarizing emails flagged as confidential — including messages stored in Drafts and Sent Items — after a logic error in Copilot Chat allowed those items into its retrieval pipeline, a lapse that raises fresh questions...
Microsoft's own Copilot Chat briefly overran its guardrails: a code error allowed the service to summarize emails labeled as confidential, processing messages from users' Sent Items and Drafts in ways that violated intended Data Loss Prevention (DLP) and sensitivity-label behavior.
Background
In...
Microsoft’s flagship workplace assistant, Microsoft 365 Copilot Chat, briefly read and summarized email messages that organizations had explicitly labeled Confidential, a logic error the company logged internally as service advisory CW1226324 and that has forced a re‑examination of how embedded...
admx templates
ai governance
copilot bug
copilot privacy
data loss prevention
data protection
email security
enterprise ai
enterprise governance
gpo management
group policy editor
microsoft copilot
privacy governance
sensitivitylabels
windows 11 policy
Microsoft’s flagship workplace assistant, Microsoft 365 Copilot Chat, mistakenly accessed and summarised some users’ confidential Outlook messages — a logic error the company first detected in late January and has since patched — raising fresh questions about how embedded AI interacts with...
Microsoft’s Copilot Chat briefly summarized emails that organizations had explicitly labeled as confidential — a failure Microsoft attributes to a server‑side code error that allowed items in users’ Sent Items and Drafts to be picked up and summarized by the Copilot “Work” chat experience, and...
For weeks this winter, a logic error in Microsoft 365 Copilot Chat’s “Work” experience allowed the AI to read and summarize emails that organizations had explicitly marked Confidential, bypassing configured Data Loss Prevention (DLP) and sensitivity‑label protections and exposing a material risk...
Microsoft’s flagship productivity assistant, Microsoft 365 Copilot Chat, briefly read and summarized emails that organizations had explicitly labeled “Confidential,” exposing a gap between automated AI convenience and long‑standing enterprise access controls...
confidential data exposure
copilot
copilot bug
copilot security
data governance
data loss prevention
dlp policies
enterprise governance
enterprise risk management
enterprise security
microsoft 365 copilot
microsoft copilot
security governance
sensitivitylabels
For weeks this winter, Microsoft’s enterprise assistant, Microsoft 365 Copilot, quietly read and summarized email messages that organizations had explicitly marked Confidential, bypassing established Data Loss Prevention (DLP) and sensitivity‑label protections — a logic bug Microsoft has tracked...
Microsoft’s flagship productivity assistant briefly did what it was built to do — read, index and summarise corporate communications — and in doing so it accidentally summarised email messages organizations had explicitly marked Confidential, bypassing Data Loss Prevention (DLP) and...
Microsoft confirmed a logic bug in Microsoft 365 Copilot that, for a window of weeks, allowed Copilot Chat’s “Work” experience to index and summarize emails that organizations had explicitly labeled as Confidential, effectively bypassing configured Data Loss Prevention (DLP) and...
For weeks this winter, Microsoft’s flagship productivity assistant, Microsoft 365 Copilot Chat, quietly indexed and summarised emails that organizations had explicitly marked Confidential, bypassing sensitivity labels and Data Loss Prevention (DLP) controls designed to stop exactly that — a...
For weeks this winter, Microsoft’s flagship productivity assistant, Microsoft 365 Copilot, quietly did exactly what it was built to do — read, index and summarise corporate communications — and in the process it mistakenly summarised emails that organisations had explicitly marked Confidential...
Microsoft has confirmed that a code error in Microsoft 365 Copilot Chat allowed the assistant to read and summarise confidential emails from users’ Sent Items and Drafts for weeks — a failure that bypassed sensitivity labels and Data Loss Prevention (DLP) protections organizations rely on to...
Microsoft has confirmed a software defect in Microsoft 365 Copilot that, for a window of weeks, allowed the assistant to ingest and summarize emails that organizations had explicitly labeled as confidential, bypassing sensitivity labels and Data Loss Prevention (DLP) protections — a failure...
Microsoft has confirmed that a code defect in Microsoft 365 Copilot allowed the assistant to read and summarize sensitivity‑labeled emails stored in users’ Sent Items and Drafts — effectively bypassing the label and Data Loss Prevention (DLP) protections many enterprises rely on — and began...
Microsoft has confirmed that a code defect in Microsoft 365 Copilot allowed its Copilot Chat “work” experience to read and summarize emails that organizations had explicitly marked as confidential, bypassing sensitivity labels and Data Loss Prevention (DLP) protections — a failure tracked...
Microsoft has acknowledged a software bug that allowed Microsoft 365 Copilot Chat to read and summarize emails explicitly labeled as confidential, bypassing organizations’ Data Loss Prevention (DLP) and sensitivity-label protections — a lapse that underlines the hard trade-off between...
Microsoft’s flagship productivity AI for Microsoft 365 has a glaring privacy problem: for weeks a code error allowed Copilot Chat to read and summarize emails that organizations had explicitly labelled as confidential, bypassing Data Loss Prevention (DLP) controls and undermining a core tenant...