Copilot's No-Code AI Agents Liable to Leak Company Data

Tenable researchers showed that Microsoft Copilot Studio AI agents are easily susceptible to prompt injection, enabling disclosure of sensitive customer data and unauthorized actions (such as editing bookings to cost $0); the report warns this is a systemic risk across agent platforms, exacerbated by unmonitored "shadow AI," and urges centralized visibility, permission controls, and continuous monitoring to mitigate exposures.