Microsoft confirmed a Copilot bug has been summarizing confidential emails since late January, bypassing DLP policies.
Not a prompt injection. Not an attack. Just a bug that gave AI access to data it shouldn't have processed.
Every AI assistant that goes deeper into your data increases the blast radius of a single misconfiguration.