Etiquetas: Copilot Studio

Security researchers have identified a new phishing technique called CoPhish that weaponizes Microsoft Copilot Studio agents to steal OAuth tokens. By embedding fake login or consent flows in shared agents, attackers can trick users into granting access to their Microsoft accounts, allowing theft of email, chat, calendar, files and automation capabilities. Microsoft acknowledges the risk and says it will address the issue through product updates. Experts recommend immediate mitigations such as restricting third‑party app consent, enforcing conditional access and multi‑factor authentication, and closely monitoring unusual app registrations and token grants. Leer más

Microsoft announced that its AI assistant, 365 Copilot, will now include two Anthropic models—Claude Sonnet 4 and Claude Opus 4.1. The new models will sit alongside OpenAI’s ChatGPT, offering users alternative AI perspectives for specific tasks. They will be available in Copilot’s Researcher agents and Copilot Studio, with access initially limited to customers who opt in through the Frontier Program. Leer más

Microsoft announced that Anthropic’s Claude models are now available to beta testers of Microsoft 365 Copilot. The new integration appears as a “Try Claude” button in Copilot’s Researcher tool and as a model‑selection drop‑down in Copilot Studio, letting users switch between OpenAI and Anthropic models. While Copilot will continue to rely on OpenAI’s latest models for most tasks, the Claude Opus 4.1 model adds a new option for complex, multistep research. Access is provided through Microsoft’s Frontier beta program, with an opt‑in required before wider rollout. Leer más