Bug exposed confidential emails to Copilot AI, bypassing Microsoft's data protection policies
Microsoft confirmed a coding bug allowed Copilot AI to access and summarize confidential emails for nearly a month, despite data loss prevention policies designed to shield sensitive information. The flaw, tracked as CW1226324, affected Microsoft 365 Copilot Chat users since January, raising concerns about AI tool security as organizations struggle to keep pace with rapid feature rollouts.