Get all your news in one place.
100's of premium titles.
One app.
Start reading
TechRadar
TechRadar
Sead Fadilpašić

Experts warn Microsoft Copilot Studio agents are being hijacked to steal OAuth tokens

Windows 11 Copilot App AI Agents.
  • CoPhish uses Copilot Studio agents to phish OAuth tokens via fake login flows
  • Attackers exploit Microsoft domains to appear legitimate and access sensitive user data
  • Mitigations include restricting app consent, enforcing MFA, and monitoring OAuth activity

Security researchers from Datadog Security Labs are warning about a new phishing technique weaponizing Microsoft Copilot Studio agents to steal OAuth tokens and grants attackers access to sensitive information in emails, chats, calendars, and more.

Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.