Microsoft Copilot ignored sensitivity labels twice in eight months — and no DLP stack caught either one

For four weeks starting January 21, Microsoft's Copilot read and summarized confidential emails despite every sensitivity label and DLP policy telling it not to. The enforcement points broke inside Microsoft’s own pipeline, and no security tool...