Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog Should I be surprised?
-
@GossiTheDog more about problem and fix here with Tony Redmond @TonyRedmond (Office365ITPros): https://office365itpros.com/2026/02/13/dlp-policy-for-copilot-bug/
"Bug", "Code error", exposing sensitive data. Yeah, nah. I'm sure that's it. Who got the data? Microslop? Gargle? Whose hands did it end up in? Hmmm.
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog if user never touched co-pilot cd this still happen?
-
@GossiTheDog The shocking thing is that so many corporations and individuals still use that Spyware riddled OS.
In a world full of crazy people, it is the sane-minded who get called crazy.
And sometimes "normal" isn't the correct thing.
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog I literally had a supervisor excitedly sharing news on Friday that we would be rolling out ChatGPT for organizational use and how it was approved for editing confidential documents. I sent back a private reply that yeah, you better not believe that for an instant.
I just forwarded this link, can't wait to see the reply.
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog The bug is "The warnings come at the end of the email", presumably.
-
@GossiTheDog while generating summaries might be a benefit. Why delete the original mail? How can one implement such a feature so lousy? (rhetorical question)
[Edit] that mail gets deleted was an assumption on my part based on "data loss prevention" in the text. It might not be the case. And the issue is only that E-Mails are summarized while flagged to not get summarized in one view of the app.
Where does it say the original email was deleted? I'm not seeing that.
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog Active #espionage
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
"No! - Yes! - Oh!" -
@GossiTheDog more about problem and fix here with Tony Redmond @TonyRedmond (Office365ITPros): https://office365itpros.com/2026/02/13/dlp-policy-for-copilot-bug/
@ericburger_nl @GossiTheDog @TonyRedmond block it.
-
A alsternerd@akkoma.alster.space shared this topic
