Connect with us

Technology

Why the Microsoft 365 Copilot bug matters for data security

Published

on

Why the Microsoft 365 Copilot bug matters for data security

NEWYou can now listen to Fox News articles!

You trust your email security settings for a reason. So when an AI assistant quietly reads and summarizes messages marked confidential, that trust takes a hit.

Microsoft says a bug in Microsoft 365 Copilot allowed its AI chat feature to process sensitive emails since late January.

The issue bypassed Data Loss Prevention policies that organizations rely on to protect private information. Put simply, emails that were supposed to stay locked down were being summarized anyway.

Sign up for my FREE CyberGuy Report 

Advertisement

Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter    

Microsoft 365 Copilot’s work chat interface sits at the center of the issue after a bug allowed it to summarize confidential emails. (Microsoft)

Microsoft 365 Copilot bug summarized confidential emails

Microsoft says a coding error impacted Microsoft 365 Copilot Chat, specifically the “work tab” feature. The AI assistant helps business users summarize content, draft responses and analyze information across Word, Excel, PowerPoint, Outlook and OneNote.

Beginning Jan. 21, an internal bug labeled CW1226324 caused Copilot to read and summarize emails stored in Sent Items and Drafts folders.

The real concern runs deeper. Several of those messages carried confidentiality or sensitivity labels.

Advertisement

Companies apply those labels along with DLP policies to block automated systems from accessing restricted content. Despite those safeguards, Copilot still generated summaries. 

We reached out to Microsoft, and a spokesperson provided CyberGuy with the following statement:

“We identified and addressed an issue where Microsoft 365 Copilot Chat could return content from emails labeled confidential authored by a user and stored within their Draft and Sent Items in Outlook desktop. This did not provide anyone access to information they weren’t already authorized to see. While our access controls and data protection policies remained intact, this behavior did not meet our intended Copilot experience, which is designed to exclude protected content from Copilot access. A configuration update has been deployed worldwide for enterprise customers.” 

Why the Microsoft 365 Copilot bug matters for data security

AI tools feel helpful. They save time and reduce busy work. But they also rely on deep access to your data. When safeguards fail, even temporarily, sensitive content can move in ways you did not expect.

YOUR PHONE SHARES DATA AT NIGHT: HERE’S HOW TO STOP IT

Advertisement

For businesses, that could mean:

Legal discussions summarized outside intended controls

Financial projections processed despite restrictions

HR communications are exposed to automated analysis

Even if no data leaves the organization, the bypass itself raises concerns about how AI integrates with enterprise security systems.

Advertisement

Business users rely on Copilot to streamline work, but a recent bug raised concerns about how it handles sensitive email content. (Microsoft)

How Microsoft is fixing the Microsoft 365 Copilot bug

Microsoft says it began rolling out a fix in early February. The company continues to monitor deployment and is contacting some affected users to verify the fix works.

However, Microsoft has not provided a final timeline for full remediation. It has also not disclosed how many organizations were affected.

The issue is tagged as an advisory, which usually signals limited scope or impact. Still, many security professionals will want deeper clarity before feeling comfortable.

What this Microsoft 365 Copilot issue reveals about AI security

This incident highlights something many companies are wrestling with right now. AI assistants sit inside productivity platforms. They need access to email, documents and collaboration tools to work well.

Advertisement

TIKTOK AFTER THE US SALE: WHAT CHANGED AND HOW TO USE IT SAFELY

At the same time, those platforms contain your most sensitive information. When AI features expand quickly, security policies must evolve just as fast. Otherwise, even a small code mistake can create unexpected exposure.

The Copilot chat feature was designed to boost productivity, yet a code error let it process emails labeled confidential. (Microsoft)

Ways to stay safe after the Microsoft 365 Copilot bug

If your organization uses Microsoft 365 Copilot, here are practical steps to reduce risk:

1) Review Copilot access settings

Work with your IT team to confirm which folders and data sources Copilot can access.

Advertisement

2) Revalidate DLP policies

Test sensitivity labels and DLP (Data Loss Prevention)  rules to ensure they block AI processing as intended.

3) Monitor advisory updates

Stay current on Microsoft service alerts and verify that the fix is fully deployed in your tenant.

4) Limit AI scope during investigations

If you have concerns, consider temporarily restricting Copilot features until verification is complete.

5) Train employees on AI boundaries

Remind staff that AI assistants can process drafts and send messages. Encourage careful handling of sensitive content.

6) Audit Copilot activity logs

Review audit logs to see whether Copilot accessed or summarized labeled emails. This helps determine actual exposure rather than assumed risk.

Advertisement

7) Review sensitivity label configuration

Confirm that confidential labels are configured to block AI processing where required. Misconfigured labels can create gaps even after a bug is fixed.

8) Reassess retention and draft policies

Because the issue involved Sent Items and Drafts, evaluate whether sensitive drafts should be stored long-term or deleted after sending.

9) Limit Copilot to specific user groups

Instead of enabling Copilot organization-wide, consider a phased deployment to departments with lower sensitivity exposure.

10) Conduct a post-incident security review

Use this moment to reassess how AI tools integrate with compliance controls. Treat it as a learning opportunity rather than a one-time glitch.

Pro Tip: This Copilot bug centers on enterprise controls. Even so, AI tools operate on your devices and accounts, so keeping software up to date and using strong antivirus software adds an important layer of defense. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

Advertisement

Considering a more private email provider

Enterprise AI bugs raise a bigger question: how much access should email platforms have to your data in the first place? If you want an added layer of privacy beyond mainstream providers, privacy-focused email services are worth exploring.

Some offer end-to-end encryption, support for PGP encryption and a strict no-ads business model that avoids scanning messages for marketing purposes.

AI WEARABLE HELPS STROKE SURVIVORS SPEAK AGAIN

Many also allow you to create disposable email aliases, which can reduce spam and limit exposure if one address is compromised.

While no provider is immune to software bugs, choosing an email service built around privacy rather than data monetization can limit how much of your information is accessible to automated systems in the first place.

Advertisement

For individuals, journalists and small businesses especially, that added control can make a meaningful difference.

For recommendations on private and secure email providers that offer alias addresses, visit Cyberguy.com

Kurt’s key takeaways

AI assistants are becoming part of daily work life. They promise speed, efficiency and smarter workflows. But convenience should never outrun security.

This Copilot bug may have a limited impact. Still, it serves as a reminder that AI tools are only as strong as the guardrails behind them.

When those guardrails slip, even briefly, sensitive information can move in unexpected ways. As AI becomes more embedded in business software, trust will depend on transparency, fast fixes and clear communication.

Advertisement

Here is the real question: If your AI assistant can see everything you write, are you fully confident it respects every boundary you set? Let us know by writing to us at Cyberguy.com

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter 

Copyright 2026 CyberGuy.com.  All rights reserved.  

Advertisement

Related Article

149 million passwords exposed in massive credential leak

Technology

China’s compact humanoid robot shows off balance and flips

Published

on

China’s compact humanoid robot shows off balance and flips

NEWYou can now listen to Fox News articles!

Humanoid robotics companies have already shown their machines can run at 22 mph, land backflips and even pull off front flips. So the new proving ground is not raw speed or acrobatics. It is control when something unexpected happens. That is where the EngineAI PM01 humanoid robot comes in.

In newly released footage, the compact humanoid keeps dancing after being deliberately pushed off balance. It performs a controlled forward slip, absorbs the disruption and smoothly regains rhythm within seconds. The motion looks fluid and surprisingly natural.

Then it lands another front flip, this time as part of a broader demonstration of balance and recovery.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

Advertisement

EngineAI pushes back on CGI skepticism as its PM01 humanoid robot demonstrates controlled recovery and dynamic motion. (Liu Lihang/Xinhua via Getty Images)

EngineAI PM01 humanoid robot shows advanced balance control

Speed gets attention. Recovery earns trust. When someone shoves the PM01, it does not freeze. It recalculates its center of mass, adjusts joint torque and corrects posture in real time. That level of control depends on tight coordination between sensors, actuators and AI algorithms. The front flip adds another challenge.

Front flips are typically harder than backflips. Rotating forward shifts the body weight ahead of the support base. That makes landings less forgiving. The EngineAI PM01 humanoid robot executes the move with coordinated arm swing, core stabilization and accurate landing mechanics. This is not about flashy tricks. It is about controlled dynamic motion under stress.

Why the compact size of the EngineAI PM01 matters

The PM01 stands just under 4 feet tall. That smaller build works to its advantage. A lower center of mass reduces tipping risk and requires less rotational force during flips. Its lighter structure also helps distribute impact forces more efficiently when it lands.

By comparison, EngineAI’s larger SE01 stands about 4 feet, 6 inches tall and weighs 88 pounds. The PM01 is roughly 10.5 inches shorter and about 17.6 pounds lighter. That size difference makes it more agile in research and development settings.

Advertisement

Full-sized humanoids face greater mechanical stress during high-impact maneuvers. They need stronger actuators, reinforced joints and heavier structural support to stay stable. Compact robots like the EngineAI PM01 can achieve advanced movement with less overall strain.

CHINA’S ROBOTICS GIANT PUTS 200 ROBOTS TO THE TEST

The PM01 robot stands on display at EngineAI’s robot retail flagship store in Shenzhen, Guangdong Province of China. Newly released footage shows the PM01 humanoid absorbing a push and recalculating its center of mass within seconds. (VCG/VCG via Getty Images)

AI hardware powering the EngineAI PM01 humanoid robot

Under the hood, the EngineAI PM01 humanoid robot combines advanced perception with serious computing power. It uses an Intel RealSense depth camera for visual awareness and spatial mapping. A dual-chip setup integrates Nvidia Jetson Orin with an Intel N97 processor. That architecture supports real-time AI workloads and rapid balance correction when the robot is pushed or slips.

The robot features 24 degrees of freedom, including 12 joint motors. This design allows smooth coordinated movement across its limbs and torso. In the small humanoid segment, PM01 competes with models like the Unitree G1 and the Booster T1. It walks at up to about 4.5 miles per hour, faster than the T1, though still below some larger high-speed humanoid platforms built for sprint performance.

Advertisement

EngineAI appears less focused on headline-grabbing speed and more focused on refined stability and controlled motion.

EngineAI pushes back against CGI claims

As humanoid videos go viral, skepticism follows. EngineAI recently addressed CGI accusations by releasing footage of its T800 humanoid physically interacting with its CEO. The company clearly wants to demonstrate that its robots operate in the real world.

That credibility push matters. In a crowded robotics market, bold claims are common. Physical demonstrations help separate engineering progress from digital effects.

WARM-SKINNED AI ROBOT WITH CAMERA EYES IS SERIOUSLY CREEPY

The nearly 4-foot-tall EngineAI PM01 uses AI-powered sensors and joint motors to recover from slips and continue moving. (VCG/VCG via Getty Images)

Advertisement

What this means to you

Right now, this looks like a polished demo. However, balance and recovery are critical for real-world use. If humanoid robots are going to work in warehouses, hospitals or our homes, they must handle bumps, slips and unexpected contact without causing damage. A machine that can brace itself, fall safely and stand back up is far more practical than one that performs a single choreographed stunt. As humanoids move closer to everyday environments, resilience becomes just as important as athletic performance. The more stable they are, the more comfortable people will feel sharing space with them.

Take my quiz: How safe is your online security?

Think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing right and what needs improvement. Take my Quiz here: Cyberguy.com.

Kurt’s key takeaways

Humanoid robots can already run fast, flip and move with serious athletic ability. What companies are racing to perfect now is something more practical: balance when things go wrong. The EngineAI PM01 humanoid robot shows how compact design and real-time correction can help a machine stay upright, recover quickly and keep moving without chaos. That kind of control matters far more in a crowded warehouse, hospital hallway or public space than a perfectly staged stunt. We are starting to see the shift from viral demo moments to robots built for everyday reliability. The real breakthrough is not the flip. It is what happens after the push.

When humanoid robots can absorb a shove, land a flip and get back to work without missing a beat, how close are we to seeing them in your neighborhood? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Advertisement

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

Copyright 2026 CyberGuy.com. All rights reserved.

Related Article

Humanoid robot makes architectural history by designing a building
Advertisement
Continue Reading

Technology

Anthropic upgrades Claude’s memory to attract AI switchers

Published

on

Anthropic upgrades Claude’s memory to attract AI switchers

Anthropic is making it easier to switch to its Claude AI from other chatbots with an update that brings Claude’s memory feature to users on the free plan, along with a new prompt and dedicated tool for importing data from other chatbots. These upgrades could allow users who have been using rivals like OpenAI’s ChatGPT or Google’s Gemini to quickly copy the data their preferred AI has collected on them and bring it over to Anthropic’s chatbot. That way, they don’t have to “start over” teaching Claude the context and history their previous chatbot already knows.

The option to import and export memories from Claude has been available since October, when Anthropic also rolled out the option for users to turn on Claude’s memory. Up until now, the memory feature was only available to users on paid Claude subscriptions, but now all Claude users can turn it on by going into “settings” then “capabilities.” This menu is also where users can find the new memory importing tool, which has users copy a pre-written prompt into their previous AI then copy the output from that prompt back into Claude’s importing tool.

Anthropic is introducing the upgraded memory importing tool as Claude is seeing a rise in popularity, driven by tools like Claude Code and Claude Cowork. Last month, Anthropic launched its new Opus 4.6 and Sonnet 4.6 models, which the company says are better at coding and completing complex tasks like working through a spreadsheet or filling out forms.

Anthropic has also been experiencing a spike in attention recently after pushing back against demands from the Pentagon to loosen the guardrails on its AI models, with the company stating publicly that they drew “red lines” around mass surveillance and fully autonomous lethal weapons.

Continue Reading

Technology

Samsung’s Digital Home Key lets you use your phone as your key

Published

on

Samsung’s Digital Home Key lets you use your phone as your key

Just days after showing off the Galaxy S26, Samsung is finally rolling out the ability for users to unlock their home with a tap of their phone or by simply approaching their door. The new feature, called Digital Home Key, will live inside Samsung Wallet and is powered by the Aliro smart home standard.

Samsung first teased its Digital Home Key feature in 2024 and said the feature would be available in 2025. That didn’t pan out, as the CSA’s Aliro standard — which will let users unlock smart locks with any phone — only arrived in February of this year. The new standard uses near-field communication (NFC) for its tap-to-unlock technology. It also supports ultra-wideband (UWB), giving users the ability to unlock their door as they approach and without pulling out their phone.

To add a Digital Home Key to your wallet, you’ll need to set up a compatible smart lock through SmartThings using Matter. Only some Galaxy smartphones support both NFC and UWB, including the Galaxy Z Fold 4 and up, as well as the Galaxy S22 Ultra and up. You can view the full list of compatible devices on Samsung’s website.

Continue Reading

Trending