#email-privacy

#email-privacy

Microsoft has confirmed that a bug allowed its Copilot AI to summarize customers' confidential emails for weeks without permission. The bug, first reported by Bleeping Computer, allowed Copilot Chat to read and outline the contents of emails since January, even if customers had data loss prevention policies to prevent ingesting their sensitive information into Microsoft's large language model. Copilot Chat allows paying Microsoft 365 customers to use the AI-powered chat feature in its Office software products, including Word, Excel, and PowerPoint.

ExpressVPN has announced three new services designed to bring the organization more in line with its competitors as a security suite -- or, if the firm has its way, to jump ahead of it in the security (and AI) space. The new ExpressKeys and ExpressMailGuard offerings made their debut on Feb 5, whereas ExpressAI will be launched at some point in the future -- with each focused on different areas: confidential computing, password management, and email privacy.

When sending a mass mail to a list of recipients using a normal mail client you don't want to include all the recipients in the To: or Cc: fields, both because it leaks the addresses of all the recipients and because of the risk of reply allpocalypse. That's when a recipient does a reply-all in response to the mail, typically asking to be removed, to all the recpients, and people respond to that and millions of emails later everyone's mailbox is unusable.

Anti-fraud nonprofit Cifas was left red-faced after sending out a calendar invite that exposed the email addresses of dozens of individuals working across the fraud space. The invite was sent in August to a session scheduled for October 16 about the organization's JustMe app, which allows individuals to confirm if applications made in their name are genuine. Over a dozen addresses were exposed in the To field, with another 45 in the CC field, according to the message.