Microsoft Viva: Viva Glint - Copilot admin configuration assistance

🚨 The Signal: A Copilot assistant in Viva Glint helps admins with configuration. This introduces an AI agent into the administrative plane, potentially exposing sensitive configuration data and creating new attack surfaces for prompt injection.

The Impact

Viva Glint administrators are affected, with a new risk of sensitive configuration data exposure via the AI assistant.

• Viva Glint Admins: Risk of sensitive configuration data exposure through AI interaction.
• Security Teams: Need to assess AI agent's data access and potential for prompt injection.
• Compliance Teams: Requires review against AI governance and data handling policies.

The Action

1. Review Microsoft's data handling policies for Copilot in Viva Glint.
2. Assess potential for prompt injection attacks on the Copilot assistant.
3. Educate Viva Glint administrators on secure interaction with AI assistants.
4. Monitor audit logs for unusual activity related to Viva Glint configuration changes.

Domain: Agentic-AI · Impact: medium · Workload: Other