Copilot's No Code AI Agents Liable to Leak Company Data - Dark Reading | Security

Microsoft Copilot Studio's AI agents are susceptible to prompt injection, a vulnerability that allows users to bypass configured security mandates. This inherent issue leads to unauthorized data disclosure, such as accessing sensitive customer details, and workflow hijacking, enabling attackers to manipulate data and processes.