identity governance

AI agents have moved from experimental curiosities to everyday tools inside Microsoft 365, Azure, and Windows — and that shift forces a reorientation of enterprise security where Entra ID becomes the new control plane. Background: why identity is the perimeter now The modern AI agent is not a...

Microsoft's decision to move Model Context Protocol (MCP) support for Azure Functions to general availability marks a pivotal moment for enterprise agent architectures: Azure now provides a first‑class, identity‑aware, serverless path for hosting MCP servers with built‑in authentication, a...

Enterprise access decisions are quietly shifting from the back end to the moment a user opens a browser, taps a mobile app, or completes a hiring workflow—and that timing shift is changing how security teams must think about identity, policy and governance. Background Organizations have long...

Windows is quietly shifting from an application platform into a managed runtime for autonomous AI agents — and that shift changes everything administrators must assume about identity, data boundaries, endpoint security, and operational playbooks for a Microsoft 365 tenant. Microsoft now offers a...

Microsoft’s Foundry Agent Service has entered the stateful era: the platform now offers a managed, long‑term memory capability in public preview that automatically extracts, consolidates, and retrieves persistent context for agents — turning short‑lived chatbots into continuous, context‑aware...

Microsoft’s case for a near-term workplace revolution is no longer a thought experiment: the company’s product leaders now argue that AI agents will act as digital coworkers, enabling small teams to run global campaigns in days, accelerate scientific discovery, and shore up stressed healthcare...

November’s Copilot Studio refresh — seeded with major reveals from Microsoft Ignite 2025 and a steady stream of feature rollouts — marks a clear inflection point: Copilot Studio is moving from experimental automation to an enterprise-grade platform for identity-bound, auditable AI agents that...

Veza’s new AI Agent Security product arrives at a moment when enterprises are rapidly delegating more authority to autonomous software — and with that delegation comes a new set of identity, access, and governance challenges that traditional IAM wasn’t built to handle. Background Veza, an...

Veza’s new AI Agent Security productcodifies a practical — and urgently needed — approach to securing agentic AI by treating AI agents as first-class identities, offering unified discovery, access governance, and least-privilege controls across major cloud and model platforms. Background Agentic...

Security has quietly crossed a threshold: modern IT complexity — not a single bug or malware family — is now the primary vector that lets attackers turn small faults into catastrophic compromise. Background The conversation among security teams has shifted from “what vulnerability was exploited”...

Microsoft’s new Agent 365 marks a deliberate shift from ad‑hoc AI helpers toward a managed, auditable fleet of AI agents—bringing identity, telemetry, and lifecycle controls to software that can plan, act, and interact across corporate systems. The product is presented as a single-pane control...

Microsoft’s move to bake agentic AI into both Office and Windows is more than a feature update — it’s an architectural shift that treats AI assistants as identity‑bound, auditable workers inside enterprise IT stacks. The company’s recent announcements stitch together in‑app automation (Agent...

Microsoft’s Ignite 2025 made one thing unmistakably clear: the company is betting the enterprise future on agentic AI — fleets of purpose-built Copilot agents that plan, act and operate under identity-aware governance — and it wants IT, security and data teams to treat agents as production...

Microsoft’s Copilot Connectors promise to end years of frantic context‑switching by letting Copilot read, index, and reason over data that lives outside the Microsoft 365 bubble, and they do it while keeping access tied to the tenant’s identity and permissions model. Background / Overview...

Digital identity has quietly moved from an abstract security concept to the plumbing of everyday life — and with that elevation has come a stark trade‑off: convenience versus control. The technology that lets services remember us, let agents act for us, and let machines prove a human exists is...

Microsoft’s Copilot Studio can be weaponized to steal OAuth tokens — an attack chain Datadog Security Labs has dubbed “CoPhish” — by hosting malicious agents on Microsoft domains and using the agents’ built‑in sign‑in workflows to deliver convincing OAuth consent prompts that exfiltrate tokens...

Microsoft has quietly added a new, no-cost layer to its Entra identity stack: Microsoft Entra ID Free, a tenant-level subscription that appears in billing accounts to surface tenant ownership, simplify tenant inventory, and provide an additional way to demonstrate and recover administrative...

Microsoft’s “Agent Factory” blueprint reframes the wave of agentic AI from a set of experimental point-solutions into a repeatable, enterprise-grade stack—one built around identity, open protocols, observability, and multi-agent orchestration—and proposes Azure AI Foundry as the practical...

Workday and Microsoft’s new integration aims to let organisations manage human employees and AI agents from a single, auditable plane — registering Copilot Studio and Azure AI Foundry agents into Workday’s Agent System of Record (ASOR) and giving each agent a verifiable Microsoft Entra Agent ID...

Bonfy.AI’s latest update to its Adaptive Content Security platform lands squarely in the intersection of AI adoption and enterprise security, expanding native integrations across Microsoft 365 and positioning an AI-first approach to Data Loss Prevention that specifically targets risks introduced...