COPILOT'S NO-CODE AI AGENTS LIABLE TO LEAK COMPANY DATA

Summary from the TLDR InfoSec newsletter

Nontechnical employees can quickly build Copilot Studio agents that connect to sensitive systems, but these bots are easily tricked into ignoring security instructions, leaking customer data, and even modifying records such as trip costs. Tenable's experiment with a travel-booking bot shows how simple prompt injections expose credit card details and abuse edit permissions.