Microsoft Copilot’s audit log flaw creates blind spots for attackers, leaving security teams struggling to trace activity.

For example, linking scheduling data to audit-log data could improve the precision of measures designed to capture after-hours documentation.