Creating Insecure AI Assistants With Microsoft Copilot Studio Is Easy

Security researcher Michael Bargury demonstrated at Black Hat that Microsoft Copilot Studio default settings and common low-code/no-code configurations can create over-permissioned, publicly discoverable "copilots" capable of impersonating users, accessing private SharePoint content, and exfiltrating sensitive data; he published a 15-item taxonomy of security issues and released CopilotHunter, a scanning/fuzzing module that finds and probes open copilots, while Microsoft has since mitigated some issues and added admin controls.