Zenity AgentFlayer Zero-Click Exploit Chains Across Enterprise AI Agents
Date: 2025-08
Affected: ChatGPT, Copilot Studio, Salesforce Einstein, Gemini, M365 Copilot, Cursor
Attack vector: prompt-injection
Category: research
Severity: Critical

At Black Hat USA 2025, Zenity Labs disclosed AgentFlayer: zero-click exploit chains compromising OpenAI ChatGPT, Microsoft Copilot Studio, Salesforce Einstein, Google Gemini, M365 Copilot, and Cursor with Jira MCP - silent hijacking without user action.


Mitigations:

Architectural layers (MAESTRO):