Microsoft Word for Android: Agent Mode

🚨 The Signal: Copilot Agent Mode is coming to Word on Android, enabling advanced AI drafting and reasoning on mobile. This expands the attack surface for prompt injection and sensitive data exposure via mobile devices.

The Impact

Mobile users with Copilot access face increased risk of data exposure and prompt injection attacks.

• Mobile users: Risk of sensitive data exposure through Copilot interactions.
• Security teams: Need to update incident response for mobile Copilot data leakage.
• Compliance officers: Review data handling policies for AI on mobile devices.
• IT administrators: Ensure mobile device management policies adequately secure Copilot data.

The Action

1. Review and update Microsoft 365 Copilot data governance policies to include mobile access.
2. Assess existing Microsoft Intune mobile application management (MAM) policies for Word on Android to ensure data protection.
3. Educate users on secure prompting practices and the risks of sharing sensitive information with Copilot on mobile.
4. Develop or update incident response playbooks for potential data exfiltration via Copilot on mobile devices.
5. Monitor Microsoft Purview audit logs for unusual Copilot activity on Android devices.

Domain: Agentic-AI · Impact: high · Workload: M365 Apps