started · updated
Microsoft warns AI agents pose potential insider security threats
Microsoft has announced a strategic shift in cybersecurity, advising organizations to treat autonomous AI agents as potential insider threats. This approach stems from the risk that agents, while not inherently malicious, can act with high speed and broad permissions, potentially causing unintended damage through errors, context shifts, or hidden instructions in documents.
To mitigate these risks, Microsoft is expanding Project Perception and introducing Guardian Agents. These tools provide continuous, machine-speed supervision of agent actions. The company is also implementing Dynamic Agent Risk, which calculates risk scores based on identity, data, and runtime signals, and Dynamic Conditional Access, which can trigger graduated responses such as blocking writes or requiring human approval.
Microsoft CEO Satya Nadella has advocated for a security architecture that separates the supply of intelligence from the authority to act, ensuring that security controls operate independently of the AI models themselves. This strategy aims to provide security teams with the visibility and control necessary to manage the increasing autonomy of AI agents within enterprise environments.
Entities
Copilot Studio · Guardian Agents · Hayete Gallot · Microsoft · Microsoft Entra · Project Perception · Satya Nadella
Claims
What the coverage asserts, and how many sources carry each claim.
- [○ 1 SOURCE] Microsoft Entra Agent IDs are automatically created for new Copilot Studio agents. www.hubsite365.com
- [● 10 SOURCES] Microsoft is treating AI agents as potential insider threats. android-mt.ouest-france.fr · cybernoz.com · forkast.news · www.larazon.es · www.forux.it · +5 more
- [● 3 SOURCES] Guardian Agents provide machine-speed supervision of agent actions. forkast.news · www.forux.it · www.upday.com
- [● 5 SOURCES] Satya Nadella argues for separating the supply of intelligence from the authority to act. cybernoz.com · forkast.news · www.punto-informatico.it · www.upday.com · www.chip.com.tr
- [● 4 SOURCES] AI agents can be manipulated by hidden instructions in documents. android-mt.ouest-france.fr · cybernoz.com · www.larazon.es · dev.to
- [● 7 SOURCES] Microsoft expanded Project Perception to include continuous agent supervision. cybernoz.com · forkast.news · www.forux.it · www.actuia.com · www.upday.com · +2 more
- [○ 1 SOURCE] Dynamic Agent Risk calculates risk scores using identity, data, and runtime signals. forkast.news
- [○ 1 SOURCE] Dynamic Conditional Access can trigger graduated responses like blocking writes or requiring human approval. forkast.news
- [○ 1 SOURCE] New Copilot Studio agents automatically receive a Microsoft Entra Agent ID. www.hubsite365.com