{
 "type": "bundle",
 "id": "bundle--061e05b5-82f6-511d-8676-d57d32eea125",
 "objects": [
  {
   "type": "incident",
   "spec_version": "2.1",
   "id": "incident--38ee5b19-5092-5315-b05e-83f948321b05",
   "created": "2025-08-06T00:00:00.000Z",
   "modified": "2025-08-06T00:00:00.000Z",
   "name": "AgentFlayer: zero-click hijacks of enterprise agents, including a Copilot Studio service agent",
   "description": "Content an enterprise agent ingests — a shared document, an email, a web page — carries instructions that make it leak data or act on the attacker's behalf without the user's involvement. The research covered several products; the Copilot Studio customer-service agent was hijacked zero-click in the demonstration.",
   "external_references": [
    {
     "source_name": "AgentDossier",
     "external_id": "TR-2026-005",
     "url": "https://sushegaad.github.io/AgentDossier/traces/tr-2026-005/"
    },
    {
     "source_name": "Zenity Labs",
     "url": "https://www.zenity.io/research/agentflayer-vulnerabilities",
     "description": "AgentFlayer: 0-click exploit methods"
    }
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--67f45629-b718-5e0d-a7dc-765177c00eb5",
   "created": "2025-08-06T00:00:00.000Z",
   "modified": "2025-08-06T00:00:00.000Z",
   "name": "Security researchers (Zenity Labs), proof of concept at Black Hat USA 2025",
   "roles": [
    "attacker"
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--ffb06eb1-f74c-5675-a7c0-66717f2c1e05",
   "created": "2025-08-06T00:00:00.000Z",
   "modified": "2025-08-06T00:00:00.000Z",
   "name": "Microsoft and other named vendors — fixes and guidance after coordinated disclosure",
   "roles": [
    "defender"
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--ed04accd-d174-50c5-9504-b4ada9441805",
   "created": "2025-08-06T00:00:00.000Z",
   "modified": "2025-08-06T00:00:00.000Z",
   "name": "TA0001 Initial Access",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0001"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--55a4e45d-e924-58d5-9d74-6cad41e42045",
   "created": "2025-08-06T00:00:00.000Z",
   "modified": "2025-08-06T00:00:00.000Z",
   "name": "TA0009 Collection",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0009"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--03fc9a09-33f0-5a35-ab0c-8269ab502265",
   "created": "2025-08-06T00:00:00.000Z",
   "modified": "2025-08-06T00:00:00.000Z",
   "name": "TA0010 Exfiltration",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0010"
    }
   ]
  }
 ]
}