Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog This is the same sort of shit as with Recall, where numerous people sounded the alarm that the feature was going to hoover up all sorts of stuff you really didn't want to be in an easily searchable index and then they implemented some half assed controls after the fact. Same shit, different week.
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog Goin well
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog yeah a "BUG"
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog Geez, I wonder why Microsoft chose to hide this.
Maybe with this lot we can make them famous!And for good measure, let's also remember Satya's words on the company's commitment to security. It went something like this: "We're prioritizing ***security*** above all else through ***Microsoft's*** Secure Future Initiative (SFI). SFI is a multiyear effort to revolutionize the way we design, blah blah blah."
What a clown.
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog Was Copilot or Claude involved in the implementation somehow?
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog This seems uncomfortably similar to the issue where copilot was able to 'summarize' documents without leaving a trace of accessing them in the audit log.
It's as though everything gets munged into RAG vectors or whatever ahead of time; and then they are trying to apply the effect the controls should have after the fact.
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog more about problem and fix here with Tony Redmond @TonyRedmond (Office365ITPros): https://office365itpros.com/2026/02/13/dlp-policy-for-copilot-bug/
-
@GossiTheDog yeah a "BUG"
@lexinova @GossiTheDog confidential information has definitely leaked. Us peasants were not supposed to know what MS does with our data.
-
@GossiTheDog yeah a "BUG"
@lexinova a bug. As in a digital "listening" device planted by Microslop for (at least the) US police/authorities to hoover up all that juicy confidential data somewhere else.
@GossiTheDog -
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
So the AI assistant designed to help you write documents is now deleting your documents
At some point we need to ask: are we adding AI because it solves a problem, or because someone in a boardroom decided every product needs an AI checkbox for the next earnings call
This is what happens when you ship features to impress investors instead of users
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog fuck all the dicks that are not held accountable
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog They would never...
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog while generating summaries might be a benefit. Why delete the original mail? How can one implement such a feature so lousy? (rhetorical question)
[Edit] that mail gets deleted was an assumption on my part based on "data loss prevention" in the text. It might not be the case. And the issue is only that E-Mails are summarized while flagged to not get summarized in one view of the app.
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog every time I read anything on microsoft, the image my brain conjures up is pedo-pal gates photo and the red string connections he has to accessing hundreds of thousands of children via school systems
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog Microsoft: "Ooooh...whoops"
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
So...exactly according to plan.
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog As if we needed more arguments to abandon US based tech 🫠
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog I wonder how many GDPR notifications this will lead to...
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
-
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.
For some reason it hasn’t put out a security advisory - but instead buried it in a service alert which isn’t publicly visible.
@GossiTheDog @Npars01 I’m shocked. Shocked.
