New 'BluePhishing' scam sees criminals spoof AI agents to get access to corporate environments

(Image credit: Generated with Gemini)

Researchers showed Microsoft Entra Agent ID blueprints can be abused to socially engineer malicious AI agents into organizations

A single approved blueprint can spawn hundreds of agent identities with access to corporate resources

Defenders should restrict third-party agent consent, apply least-privilege controls, and monitor agent creation events

When Microsoft first introduced Entra Agent ID as a way organizations can identify and monitor AI agents, it most certainly did not…