copilot studio security

ServiceNow and Microsoft — two of the enterprise world’s most ubiquitous platforms — were this week at the center of fresh security alarm bells after independent researchers demonstrated how agentic AI features can be abused to impersonate administrators, create privileged backdoors, and move...

Guy Zetland and Keren Katz report that a Tenable AI Research proof‑of‑concept has turned Microsoft Copilot Studio’s promising no‑code agent model into a glaring attack surface: simple prompt injections can coax agents into leaking sensitive records — including credit card data — and even change...