Hackers Exploit Copilot Studio's New Connected Agents Feature to Gain Backdoor Access

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Hackers Exploit Vulnerabilities in Copilot Studio's Connected Agents Feature Security researchers at Zenity Labs have identified critical design flaws in Microsoft’s Copilot Studio, specifically in the newly introduced Connected Agents feature. These vulnerabilities enable attackers to impersonate organizations and gain unauthorized backdoor access to essential business systems. The feature, designed for AI-to-AI integration, is being actively exploited by malicious actors. 3 sources 40