TLDR InfoSec · MISCELLANEOUS
COPILOT BROKE YOUR AUDIT LOG, BUT MICROSOFT WON'T TELL YOU
Summary from the TLDR InfoSec newsletter
Microsoft's Copilot AI allowed users to access files in M365 without leaving audit log records, creating potential security and compliance risks. This was reported to Microsoft, which quietly fixed the issue but chose not to notify customers or issue a formal security alert. Any organization using Copilot before August 18 may have incomplete audit logs and might be unaware of what happened.