A Copilot Studio Story 2: When AIjacking Leads to Full Data Exfiltration

EchoLeak: A Reminder That AI Agent Risks Are Here to Stay

A Copilot Studio Story: Discovery Phase in AI Agents

AI Agents & 0-Click Exploits: The New Battle Ground for AI Security

Zenity Research Published at RSAC 2025

Copilots and agents are a new access vector; How to build an AppSec program that scales to the level of citizen development

Links and materials for Scaling AppSec With an SDLC for Citizen Development

Links, demos, tools and slides for RSAC 2025

Links and materials for Your Copilot Is My Insider

Links, demos, tools and slides for RSAC 2025

Sure, Let AI Browse the Internet—What Could Possibly Go Wrong?

Internet browsing for AI agents leads to 0click compromise but these mitigations can help

TTPs.ai for GenAI-Targeted Attacks

Guiding threat simulation and defense for Copilots and Agents

Over Permissions in Salesforce Einstein and Unexpected Consequences

Outsmarting Copilot: Creating Hyperlinks in Copilot 365

The Long and Winding Road of DLP Patches in Power Platform

Reviewing Microsoft's Fix for the 'All You Need Is Guest' DLP Bypass