While Microsoft actively promotes its Copilot tools for businesses, the company also warns of the dangers of uncontrolled use of “shadow” AI by employees.
A new report raises the alarm about the rapid growth of so-called “shadow AI,” where employees use third-party neural networks and bots in their work without the approval of the company’s IT department.
According to Microsoft, 71% of UK respondents admitted using AI services for personal use at work without the knowledge of system administrators. Furthermore, more than half continue to do so regularly.
This practice covers a wide range of activities: nearly half of employees use unauthorized AI for business correspondence, 40% for preparing presentations and reports, and one in five for financial transactions. This confirms previous research showing that ChatGPT remains one of the most popular tools for these purposes.
Despite these concerns, Microsoft is simultaneously encouraging the concept of BYOC (Bring Your Own Copilot) . If an employee has a personal Microsoft 365 subscription with access to an AI assistant, they are encouraged to use it in the office, even if company management hasn’t yet implemented such technologies.
The report’s authors indicate that only 32% of respondents are genuinely concerned about confidential customer and company information leaks . Furthermore, only 29% are aware of potential IT security threats. The most common reason for using third-party AI is simple habit: 41% of respondents admitted using the same tools at work and at home.
Despite Microsoft’s continued efforts to promote Copilot, the reality remains unfavorable for the brand. ChatGPT continues to be a leader in the enterprise segment, while Copilot itself has yet to demonstrate widespread adoption. Consequently, the company legitimizes the practice of shadow AI if it can encourage employees to use its proprietary solutions.
Concluding the report, Microsoft emphasizes that the uncontrolled implementation of artificial intelligence can pose serious risks when it comes to solutions not originally designed for enterprise environments . The company insists that only professional systems, tailored to business needs, can provide the necessary level of security and stability.
Follow us on Google News to receive daily updates on cybersecurity. Contact us if you would like to report news, insights or content for publication.
