Microsoft Entra Agent ID Logs Expose Suspicious Assistive Agent Activity

Microsoft Entra Agent ID logs have exposed a subtle but consequential threat vector: assistive agents using the OAuth On-Behalf-Of (OBO) flow to act with delegated user privileges and perform potentially risky actions, such as sending external emails. In the examined incident an email with subject “Here is your invoice” was recorded in Exchange Purview as […]

The post Microsoft Entra Agent ID Logs Expose Suspicious Assistive Agent Activity appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.