Thousands of private GitHub repositories, some of which possibly contained credentials and other secrets, are being exposed through Microsoft Copilot, the company’s Generative Artificial Intelligence (GenAI) virtual assistant,

A recent post alleged that ChatGPT (and, by association, Microsoft Copilot) was capable of accessing data from private GitHub repositories.

A Redditor asked Microsoft’s Copilot if there was a script to activate Windows 11, and the Copilot outlined the instructions. The Copilot AI guided the Redditor through step-by-step instructions on illegally activating Windows copies using the Microsoft Activation Scripts.

Of course, activating Windows 11 in a less-than-legitimate way is nothing new. And the script that Copilot provides instructions for isn’t even a new one—it’s been around for a few years. However, the fact that Microsoft hasn’t created some kind of safety net to keep Copilot from talking people through the exact process is kind of crazy.