Episode 113: Understanding Prompt Injection Attacks (w/ Asaf Tzuk and Gaya Salomon)

AI agents are powerful, but with great power comes new security challenges. In this episode of Forward Deployed, we dive into prompt injection attacks and the emerging threat landscape for agentic systems. Our guests, Gaya Salomon and Asaf Tzuk, explain what XPIA (Cross-Prompt Injection Attacks) means, why it matters, and how Microsoft is building layered defenses to keep agents secure. We cover real-world scenarios, built-in protections, and how admins and makers can work together to safeguard their environments.   To learn more and explore related resources: https://aka.ms/FD-StrengthenAgentsBlog https://aka.ms/FD-DefenderAgentsBlog

Welcome to Forward Deployed! We’ve rebranded to reflect our broader focus on technologies and business solutions that go beyond low code. In our first episode as the Forward Deployed podcast, we’re joined by Julie Seto, Principal Product Manager for SharePoint, to explore the newly released SharePoint Knowledge Agent. Julie walks us through how this AI-powered tool helps users organize content, extract metadata, and improve searchability across SharePoint, all with no code. Whether you're a site manager, content creator, or everyday information worker, this episode shows how Knowledge Agent is transforming how we manage and retrieve content.   To learn more and get started with SharePoint Knowledge Agent, explore the following resources: Launch blog post: https://aka.ms/KnowledgeAgentLaunch Intro video: https://aka.ms/KAvideo Simulation: https://aka.ms/KAdemo Metadata blog post: https://aka.ms/KAmetadatablog

What if your daily Copilot prompts could turn into automated actions? In this episode, Heather Orta-Olmo joins Sean, Wendy, and Jocelyn to introduce the Workflows Agent, a new way to build personal automations inside Microsoft 365 Copilot. From summarizing meetings to creating planner tasks and blocking focus time, Heather shares how this conversational experience empowers users to automate without knowing a single API. We talk prompt tips, collaboration hacks, and yes, how to avoid flooding your inbox with recursive flows. This episode is your guide to getting started, getting better, and getting more done with Workflows Agent.   Want to dive deeper?  https://aka.ms/LCA-CopilotNewAgentsBlog https://aka.ms/LCA-WorkflowsAgentVideo  

What does it take to roll out Copilot Studio at scale? Andrew Gaskins of Lumen joins the podcast to unpack how admins can lead innovation through governance. From zone strategies to CoE reviews, Andrew walks us through the battle-tested blueprint that helped Lumen deploy thousands of agents while keeping costs in check. If you're wondering how to balance freedom and control in your agent strategy, this episode is your playbook.   Andrew’s previous episode: https://thelowcodeapproach.podbean.com/e/the-power-of-building-a-community-w-andrew-gaskins/

When security becomes the strategy, everything changes. Ilya Grebnov, Deputy CISO for Business Applications, joins the podcast to explain how Microsoft’s Secure Future Initiative (SFI) transformed the way engineers think, build, and ship. He walks through the principles behind “secure by design,” how Microsoft balances usability with protection, and what it takes to earn customer trust in a world of evolving threats. From tightening the smallest controls to rethinking global infrastructure, this conversation shows what it means to lead with security first, and why that mindset is shaping the future of agents, AI, and cyber defense.

Downtime is expensive. Managed Availability makes sure you never have to pay it. In this episode, Shivani Pradhan and Mauktik Gandhi join us to walk through how the Power Platform and Dynamics 365 Foundations team built a system that’s resilient by design. With built-in failovers, isolated “islands,” and one-minute recovery, when the unexpected happens, you stay up and running. All with one push of a button.

What exactly are Agent Flows, and how do they change automation in Copilot Studio? Heather Orta-Olmo and Derah Onuorah join Sean, Wendy, and Ken to explain how flows work, when to use them instead of Power Automate, and why human-in-the-loop (or man in the middle) is key. With stories from Philips and a preview of intelligent approvals, this episode shows how Agent Flows are powering the next wave of intelligent automation.   Jump into the conversation at aka.ms/LowCodeTopicRequest

How do you balance speed and safety in the age of AI agents? In this episode, Priya Vaidyanathan joins Sean, Wendy, and Ken to talk about zone governance. They explain how the framework helps organizations innovate quickly while maintaining security, what it means to segment environments into zones, and how real customers, such as Heineken, are implementing it in practice. With customer examples and a look ahead to PPCC, this episode is a roadmap for governing AI without slowing it down.

What if your project manager had an AI teammate? In this episode, the Planner team’s Shree Shasta Kumar and Milan Kumar Mohapatra join us to introduce the Project Manager Agent. They explain why Microsoft built it, how it integrates with Teams and meetings, and the guardrails in place to keep outputs grounded and secure. From automating status reports to capturing tasks in real-time, this episode shows how AI is taking on the busywork so humans can focus on leading. Learn more here: https://aka.ms/PMA-skills-Teams-meetings-channels

AI won’t do everything for us, but it can clear space for the work that matters. In this episode, Phil Topness shares how AI enables organizations to shift from merely checking boxes to unlocking creativity and connection. We discuss adoption journeys, the importance of governance and data readiness, and how executive sponsors can establish a vision that drives measurable value. Phil also explains the role of champions, the importance of telling success stories, and how to balance small efficiency gains with bold, high-impact use cases.