Microsoft’s been inserting AI everywhere it can, including into some of the world’s most popular business productivity apps.

A single email can silently trigger Copilot to exfiltrate sensitive corporate data — no clicks, no warnings, no user action.