New CoPhish attack steals OAuth tokens via Copilot Studio agents October 25, 2025 A new phishing technique dubbed ‘CoPhish’ weaponizes Microsoft Copilot Studio agents to deliver fraudulent OAuth consent requests via legitimate and