Prompt Injection in Email, Calendars, and Productivity Tools: The Enterprise AI Copilot Attack Surface
Microsoft 365 Copilot, Gemini in Workspace, and similar AI assistants have read-write access to your entire mailbox, calendar, and document corpus. A single malicious email can hijack them to exfiltrate your inbox history, forward confidential documents, or impersonate you in outgoing messages — no exploit required.