Proofpoint details BluePhishing attack on Microsoft Entra agent identities
One admin consent can create persistent agent identities; Proofpoint reports no observed real-world use.
Stories per day · 30 days
3 RSS
Relatedai-agents2entra2microsoft2agentic-ai1arkose-labs1bot-management1consent-phishing1least-privilege1microsoft-entra1oauth1project-perception1prompt-injection1proofpoint1session-control1
7 stories, newest first · one card per story
Stories tagged #agent-identity
Arkose Labs expands Agent Trust Manager to control agent sessions
New controls add per-step allow, monitor or block policies and an Agent ID that persists across networks.
1
Microsoft announces Guardian Agents to constrain AI agent permissions
Discovery now covers 60 local agent types, and risk signals can revoke access or stop an agent.
Microsoft extends Project Perception to secure AI agents as insiders
Discovery grows to 60 local agent types, and Entra Agent ID can cover agents found only through sensors.
AppViewX Adds Shadow AI Visibility and a Runtime Kill Switch to Agent Identity Security
AppViewX expanded Agent Identity Security with shadow-AI discovery, an MCP gateway, and a runtime agent kill switch.
2
One Bad Prompt Took Down a Company’s Salesforce: RSA’s Jim Taylor on Agent ID and Taming the 4,000 Shadow AI Agents Hiding in Your Enterprise
RSA launched Agent ID to discover, secure, and govern enterprise AI agents after finding thousands of shadow agents.
6
A Scalable Trust Discovery Architecture for the Internet of Agents
Researchers propose a three-layer trust discovery architecture for the Internet of Agents with registry-anchored identities, sustaining 19,000 registrations and 29,000 discoveries per second.