Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring

Summary

Microsoft announced new controls to monitor and restrict potentially rogue AI agents in enterprise environments, urging organizations to treat agents as insiders rather than trusted software. The capabilities extend Project Perception, Microsoft's agentic security system launched in July, and add Dynamic Permissions, Dynamic Agent Risk scoring, and Dynamic Conditional Access. Microsoft is also expanding discovery to 60 types of local agents, including Claude Code, OpenAI Codex and GitHub Copilot.

Mitigation

Dynamic Permissions grants agents no permissions or the bare minimum at the outset, grants access per task, and requires human review for high-impact actions. Dynamic Conditional Access scales back agent permissions, limits data and network access, requires approval for consequential actions, or isolates or halts the agent's runtime if risk becomes high enough.

Topics

• AI agents
• Frontier model safety

Related items

• LowMicrosoft fixes classic Outlook bug that hid Copilot buttonsSame vendor · BleepingComputer
• InfoMicrosoft, Nvidia push provenance checks as open-weight AI adoption acceleratesSame vendor · CSO Online
• InfoManaging open-weight model risk in enterprise deploymentsSame vendor · Microsoft Security Blog
• InfoCyberattack AIs must be trained only on air-gapped systems, hundreds of AI researchers saySame vendor · CSO Online
• MediumFake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents EarlySame vendor · The Hacker News