OMG. #Microsoft #Copilot bypasses #Sharepoint #security so you don’t have to!
“CoPilot gets privileged access to SharePoint so it can index documents, but unlike the regular search feature, it doesn’t know about or respect any of the access controls you might have set up. You can get CoPilot to just dump out the contents of sensitive documents that it can see, with the bonus feature* that your access won’t show up in audit logs.”
The S in CoPilot stands for Security!
https://pivotnine.com/the-crux/archive/remembering-f00fs-of-old/
Follow
Security exists for a reason, so I can see this being exploited by people within a work place, to obtain sensitive / confidential information.
What could possibly go wrong.
