InfoSecBulletin Cybersecurity for mankind
Microsoft has admitted that a coding bug accidentally allowed Copilot Chat to access and summarize confidential emails. Microsoft said that a bug in Microsoft 365 Copilot allowed the AI assistant to access private emails, raising serious privacy issues for companies using the service.
Bleeping Computer reports, the flaw bypasses data loss prevention (DLP) policies enabled by customers who wish to keep their data shielded from Microsoft’s AI. The issue reported on Jan. 21 affects the Work tab of Copilot Chat, a feature introduced to Microsoft 365 business users in September through Word, Excel, PowerPoint, Outlook, and OneNote.
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw
Anthropic prepares “Claude Money” to analyze bank account and financial data
GhostCode Phishing Kit Evades Microsoft 365 MFA to Hijack Accounts in 78 Seconds
CISA Warns of Cisco Secure Email Gateway 0-Day Flaw Actively Exploited in Attacks
VPN flaw exposed 246,000 personnel records in japan
Hackers deploy Casbaneiro Trojan that activates on bank websites
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
“We identified and addressed an issue where Microsoft 365 Copilot Chat could return content from emails labelled confidential authored by a user and stored within their Draft and Sent Items in Outlook desktop,” Microsoft said in its statement to the BBC.
“While our access controls and data protection policies remained intact, this behaviour did not meet our intended Copilot experience, which is designed to exclude protected content from Copilot access,” they added.
“A configuration update has been deployed worldwide for enterprise customers.”
A fix for the issue started rolling out earlier this month, but the company hasn’t said when it will be fully resolved. They are monitoring the situation and contacting affected users for feedback. It’s unclear how many organizations are impacted, but it seems the UK’s National Health Service (NHS) is one of them.
“Microsoft says it has rolled out an update to fix the issue, and that it “did not provide anyone access to information they weren’t already authorised to see”, BBC reported.
Microsoft Copilot Studio, launched in February 2023, enables companies to create AI assistants that are trained with their own data to automate tasks in Microsoft apps.
Since its launch, Microsoft has rapidly deployed its AI assistant, Copilot, across its tools like Word, Excel, Outlook, PowerPoint, and OneNote. In September 2025, Microsoft 365 business customers gained access to Copilot Chat, allowing direct interaction with AI agents.
Tech companies promote AI assistants as vital productivity tools, but cybersecurity experts caution that quick AI adoption introduces new security risks that organizations may find hard to manage. Companies dealing with sensitive data face particularly high stakes.
Back in 2024, security researcher Michael Bargury demonstrated how Copilot Studio bots can easily exfiltrate sensitive enterprise data, circumventing existing controls. The findings were revealed at the annual Black Hat USA 2024 security conference in Las Vegas.
According to the researcher, Copilot has an array of vulnerabilities that increase users’ risk. A combination of insecure defaults, over-permissive plugins, and wishful design thinking made data leakage “probable, not just possible,” the researcher said at the time.
Using an exploitation tool he created, the researcher scanned for publicly accessible copilots and abused them to extract sensitive enterprise data.
“Attackers can remotely take over your interactions with the Copilot. They can get the Copilot to do whatever they want on your behalf, manipulate you, and misinform your decisions. They have full control of every word the Copilot writes to you,” Bargury said.
