Microsoft has resolved a security vulnerability in Microsoft 365 Copilot Enterprise that allowed automated prompt execution and silent data exfiltration. Concurrently, China's Ministry of State Security is accelerating the removal of Windows 10 Government Edition from all state-operated systems, redirecting public infrastructure toward domestic operating systems.

Copilot Enterprise Guardrail Bypass

Varonis security researchers identified an undocumented parameter, `?autorun=1`, which could be extracted by querying Copilot about its internal safety mechanisms. When paired with the `?q=` parameter, this flaw permitted the automated execution of prompts without user confirmation, creating an attack vector for silent data exfiltration in enterprise environments.

Microsoft addressed the vulnerability through mitigation steps deployed in February, followed by comprehensive system fixes implemented across February and March. The patches eliminate the automated prompt execution path, restoring strict guardrail enforcement for enterprise users interacting with the AI assistant.

Windows 10 Exit Strategy in China

In parallel with software security updates from Redmond, Chinese state authorities are enforcing a strict migration timeline away from legacy Microsoft infrastructure. The Ministry of State Security ordered the complete removal of the custom Windows 10 Government Edition, developed in partnership with China Information Technology (CMIT), citing unresolved cybersecurity risks.

State-operated organizations are transitioning to domestic operating systems, including HarmonyOS, UOS, and Kylinsec. This state-mandated shift has driven significant valuation gains for domestic software developers on regional stock exchanges.

These developments highlight divergent approaches to enterprise software control. While Western software ecosystems rely on rapid vulnerability patching cycles to secure cloud-based AI tools, state-level actors in Asia are neutralizing supply-chain dependencies by mandating complete platform replacement with sovereign alternatives.