Microsoft patched a Copilot Studio prompt injection — but data still exfiltrated

VentureBeat·medium signal

VentureBeat reports a Copilot Studio prompt-injection flaw where the applied patch did not stop data exfiltration, exposing the gap between vulnerability remediation and actual agent containment. It underscores that for agentic systems, fixing the injection vector is not the same as preventing the downstream data leak the agent can still perform. The case is being used as a template for agent remediation playbooks across Microsoft and Salesforce Agentforce deployments.