Microsoft 365 Copilot: Review PDFs using the Copilot context menu on OneDrive iOS

🚨 The Signal: Copilot can now summarize, explain, or translate selected PDF text on OneDrive iOS. This expands AI-driven content interaction to mobile, increasing data exposure risks if not properly governed.

The Impact

Mobile users with Copilot licenses are affected, increasing the risk of sensitive data exposure and misuse through AI interactions.

• Mobile users: Increased risk of unintentional data sharing via Copilot prompts.
• Security teams: New vector for data exfiltration and prompt injection attacks.
• Compliance officers: Potential for non-compliance with data handling policies on mobile.
• Data owners: Risk of sensitive information being processed by AI without proper controls.

The Action

1. Review Copilot license assignments, especially for users handling sensitive data on mobile.
2. Update data loss prevention (DLP) policies to include Copilot interactions on mobile platforms.
3. Educate users on responsible AI use, data handling, and prompt engineering best practices for Copilot on mobile.
4. Assess and update your organization's acceptable use policy for AI tools on mobile devices.
5. Monitor Copilot usage logs for unusual activity or potential data exfiltration attempts.

Domain: Agentic-AI · Impact: high · Workload: OneDrive