Microsoft Copilot Vulnerability: Audit Logs are Broken
2025-08-20
A security researcher discovered a critical vulnerability in Microsoft Copilot: it sometimes accesses files and returns information without logging the action in audit logs. Worse, users can instruct Copilot to access files without leaving a trace. While Microsoft has fixed the vulnerability, their decision not to notify customers raises serious concerns about transparency and customer responsibility. This flaw poses a significant threat to organizations relying on audit logs for security and compliance, particularly in highly regulated industries like healthcare and finance.
Tech
Audit Logs