OneNote: Multimodal capture in Copilot Notebooks (Android)

🚨 The Signal: Copilot Notebooks on Android now support multimodal capture (audio, images, text) for offline content. This expands data ingestion into Copilot, increasing the attack surface for sensitive information and potential for data exfiltration.

The Impact

All users are affected by increased data capture capabilities, posing a risk of sensitive data exposure and potential for prompt injection attacks.

• End users: Risk of inadvertently capturing and storing sensitive information in Copilot Notebooks.
• Security teams: Increased challenge in monitoring and preventing sensitive data exfiltration via Copilot.
• Data owners: Potential for unclassified sensitive data to be processed by Copilot, impacting data governance.
• AI governance teams: New vectors for prompt injection and data poisoning through multimodal input.

The Action

1. Review and update Microsoft Purview Data Loss Prevention (DLP) policies to include Copilot Notebooks and multimodal content.
2. Educate users on appropriate data handling when using multimodal capture in Copilot Notebooks, emphasizing sensitive information.
3. Implement or review Microsoft Entra Conditional Access policies to restrict access to Copilot Notebooks based on device compliance or location.
4. Monitor Microsoft Defender for Cloud Apps for unusual activity related to Copilot Notebooks and data sharing.
5. Assess and update AI governance policies regarding multimodal input and data retention for Copilot-generated content.

Domain: Agentic-AI · Impact: high · Workload: M365 Apps