New 'BluePhishing' scam sees criminals spoof AI agents to get access to corporate environments

New 'BluePhishing' scam sees criminals spoof AI agents to get access to corporate environments

Be careful which agents you approve - some are malicious and can bring their friends, too.

Hackers Could Abuse Microsoft Entra AI Agents to Hijack Enterprise Accounts Without Stealing Passwords

Researchers have shown that attackers can take over parts of a Microsoft 365 environment by tricking one person into approving a fake AI agent. No password is stolen and no login screen is faked. The technique is called BluePhishing. It targets Microsoft Entra Agent ID, the system that gives AI agents their own identities inside […]