BluePhishing Attack Abuses Microsoft Entra OAuth Consent to Create Hidden AI Agent Identities

“BluePhishing,” a technique that extends OAuth consent phishing to Microsoft Entra’s AI agent model. The attacker needs only one consent click to create persistent agent identities inside a victim tenant. Proofpoint says this is a research-based proof of concept and it has not identified any in-the-wild activity Microsoft Entra Agent ID extends Entra to AI […]

The post BluePhishing Attack Abuses Microsoft Entra OAuth Consent to Create Hidden AI Agent Identities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
posted by pod_feeder

BluePhishing Attack Abuses Microsoft Entra OAuth Consent to Create Hidden AI Agent Identities

"BluePhishing," a technique that extends OAuth consent phishing to Microsoft Entra's AI agent model.

^{Mayura Kathir (GBHackers Security | #1 Globally Trusted Cyber Security News Platform)}