other
Microsoft's identity provider issuing the user tokens the article says must be presented to the Agent API for OBO-authenticated tools.
No evidence-backed relationships are recorded.
The January 8 deal puts continuously granted and revoked access at the center of the Falcon roadmap. Anyone signing a PAM or IGA renewal this year now has a harder question to answer.
Reality
A spraying campaign against Entra ID used OAuth's password grant for Azure CLI to get tokens with no MFA prompt. The lesson is about policy coverage, not about second factors.
Reality
A new Bedrock AgentCore pattern from AWS treats the agent as an orchestrator with no say over access, pushing per-user enforcement down to DynamoDB, Knowledge Bases and Salesforce.
Reality
Wiz says rogue device registrations are drifting toward benign names, while nearly one in seven Entra tenants saw such an attack in 90 days. Naming strings were never the signal.
Reality
A Tenable walkthrough of the Azure ransomware crew makes one operational point worth keeping: the alert that matters fires in the control plane, before anything is encrypted.
Reality
Kaspersky says an Iranian-linked framework now picks its channel per transaction from a DNS record, and can swap the Google relay behind it. Allowlisted SaaS domains carry the traffic.
Reality
A Foundry governance walkthrough splits agent permissions into on-behalf-of reads, unattended agent identity, and human approval. Collapsing them into one credential is a publish-time failure.
Reality