Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring
Microsoft on Monday announced new controls to monitor and restrict potentially rogue AI agents in enterprise environments, arguing that organizations should treat these agents as insiders rather than trusted software.
The capabilities extend Project Perception, the agentic security system Microsoft launched in July. Perception was initially pitched as a defense against AI-driven attacks from outside, but it is now being applied to the agents companies run internally.
Hayete Gallot, executive vice president of Microsoft Security, said companies tend to trust the agents they deploy by default. She warned that frontier models are trained to get results and aren’t built around organizational norms or judgment. “These agents are frequently overprivileged, have access to data, tools and systems and can take actions and make decisions in critical processes,” Gallot wrote.
Nadim Abdo, Microsoft’s corporate vice president of identity and network access, clarifiedthe insider label. “This does not mean agents are...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
