Hackers Exploit Copilot Studio’s New Connected Agents Feature to Gain Backdoor Access

Cybersecuritynews •Abinaya • December 30, 2025

Microsoft’s newly unveiled “Connected Agents” feature in Copilot Studio, announced at Build 2025, is creating a significant security vulnerability. Attackers are already exploiting to gain unauthorized backdoor access to critical business systems. Connected Agents enables AI-to-AI integration, allowing agents to functionality and reuse logic across environments. While designed for efficiency, similar to wrapping repeated […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Hackers Exploit Vulnerabilities in Copilot Studio's Connected Agents Feature Security researchers at Zenity Labs have identified critical design flaws in Microsoft’s Copilot Studio, specifically in the newly introduced Connected Agents feature. These vulnerabilities enable attackers to impersonate organizations and gain unauthorized backdoor access to essential business systems. The feature, designed for AI-to-AI integration, is being actively exploited by malicious actors. 3 sources 40

Extracted Entities

Platforms (1)

Copilot Studio