One Filter Fixed Azure OpenAI's Hidden Security Flaw

Egiziago Cioffi, CEO of SynSphere Italia, built an Azure OpenAI email assistant that auto-resolves 60% of inbound customer emails and passed every internal evaluation. The system appeared airtight until a critical test revealed otherwise. When Cioffi ran a low-privilege account against the same queries a high-privilege account had already made, the assistant returned SharePoint content the lower-privileged user should never have accessed. Evaluation scores had masked a real security gap that only surfaced through direct permission-level testing.