Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information.

Hacker News is a community-driven platform for sharing and discussing technology news, startups, and programming-related topics. Through user submissions and comments, Hacker News offers insights into emerging technology trends, industry developments, and entrepreneurial ventures. Readers can participate in discussions, share their insights, and stay informed about the latest advancements in technology and innovation.

Hacker News

A bug in Microsoft 365 Copilot (tracked as CW1226324, first detected January 21) has been causing the AI assistant's 'work tab' chat feature to incorrectly read and summarize emails from users' Sent Items and Drafts folders, even when those emails carry confidentiality sensitivity labels and are protected by data loss prevention (DLP) policies. Microsoft confirmed a code error is responsible and began rolling out a fix in early February, but has not disclosed the full scope of affected users or organizations, nor provided a final remediation timeline.

Microsoft says bug causes Copilot to summarize confidential emails