Microsoft Copilot Bypassed Confidentiality Controls Twice in Eight Months

The AI assistant ignored sensitivity labels and data loss prevention policies, accessing classified emails at NHS and other organizations without detection.