“BluePhishing,” a technique that extends OAuth consent phishing to Microsoft Entra’s AI agent model. The attacker needs only one consent click to create persistent agent identities inside a victim tenant. Proofpoint says this is a research-based proof of concept and it has not identified any in-the-wild activity Microsoft Entra Agent ID extends Entra to AI […]
This article has been indexed from GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Read the original article:
BluePhishing Attack Abuses Microsoft Entra OAuth Consent to Create Hidden AI Agent Identities