(Updated) Microsoft OneNote: Copilot notebook available in OneNote on Mac

🚨 The Signal: Copilot Notebook in OneNote for Mac introduces AI-powered content analysis. This expands the attack surface for data leakage and prompt injection, requiring vigilance over sensitive information processed by AI.

The Impact

Users with Copilot licenses on Mac are affected, increasing the risk of sensitive data exposure through AI processing and potential prompt injection.

• End users: Risk of inadvertently exposing sensitive data to AI models.
• Security team: Increased monitoring burden for data processed by Copilot.
• Data owners: Potential for sensitive information to be summarized or extracted by AI without explicit consent.
• Compliance officers: New considerations for data residency and AI processing of regulated data.

The Action

1. Review and reinforce data classification policies for content used with Copilot.
2. Educate users on responsible AI usage, including not inputting sensitive or classified data into Copilot prompts.
3. Monitor Microsoft Purview Audit logs for Copilot activities involving sensitive information.
4. Ensure Microsoft 365 Copilot licenses are only assigned to users who have completed AI governance training.

Domain: Agentic-AI · Impact: high · Workload: M365 Apps