Microsoft Copilot (Microsoft 365): Controls for XPIA risk from external emails in Copilot Chat

Originally posted by Microsoft Apr 16, 2025 Uncategorized 0 Comments

Tenant admins will now be able to control which emails can be used by Copilot for summarization, providing deterministic protection against XPIA attacks from unfamiliar domains. End users will also be equipped with UX features to see excluded emails due to policy and appropriate warnings/labels for external emails.

Product
Release phase	Preview
Release date	June CY2025 Preview date: May CY2025
Platform	Web
Cloud Instance	Worldwide (Standard Multi-Tenant)
Created	2025-04-15
Roadmap ID	488798
Roadmap Link	https://www.microsoft.com/microsoft-365/roadmap?id=488798