Microsoft Copilot Bug Bypasses DLP to Summarize Confidential Emails
A critical vulnerability in Microsoft 365 Copilot has allowed the AI assistant to access and summarize confidential emails, bypassing established Data Loss Prevention (DLP) protocols. The bug, active since late January 2026, affects enterprise customers who rely on these safeguards to prevent sensitive data exposure.