Microsoft cautions that rapid deployment of workplace AI assistants can turn them into insider threats, calling the risk a "double agent." The company’s Cyber Pulse report explains how attackers can manipulate an agent’s access or feed it malicious input, using its legitimate privileges to cause damage inside an organization. Microsoft urges firms to treat AI agents as a new class of digital identity, apply Zero Trust principles, enforce least‑privilege access, and maintain centralized visibility to prevent memory‑poisoning attacks and other forms of tampering.
Leia mais →