Hackers Exploit Vulnerabilities in Copilot Studio's Connected Agents Feature

Security researchers at Zenity Labs have identified critical design flaws in Microsoft’s Copilot Studio, specifically in the newly introduced Connected Agents feature. These vulnerabilities enable attackers to impersonate organizations and gain unauthorized backdoor access to essential business systems. The feature, designed for AI-to-AI integration, is being actively exploited by malicious actors.