Microsoft Copilot Spent Two Weeks Reading Confidential Emails It Was Supposed to Ignore
A Microsoft 365 Copilot bug (CW1226324) let the AI summarize emails with sensitivity labels in Sent Items and Drafts, bypassing DLP policies for two weeks. The NHS was affected. It's the second time in eight months.