Copilot Chat bug exposed confidential emails/files. Microsoft patching, but the risk remains if tenants don't configure AI access restrictions. Core issue: AI retrieves what it can reach, not what it should share. Governance, not just code, determines security. #infosec#AI#privacy