TLDR InfoSec · MISCELLANEOUS

COPILOT BROKE YOUR AUDIT LOG, BUT MICROSOFT WON'T TELL YOU

pistachioapp.com8 min read

Summary from the TLDR InfoSec newsletter

Microsoft's Copilot AI allowed users to access files in M365 without leaving audit log records, creating potential security and compliance risks. This was reported to Microsoft, which quietly fixed the issue but chose not to notify customers or issue a formal security alert. Any organization using Copilot before August 18 may have incomplete audit logs and might be unaware of what happened.