Tuesday, April 28, 2026 · 2 of 4
Microsoft Entra AI Agent ID role flaw disclosed
Silverfort found that the "Agent ID Administrator" role—designed for AI agents—could be abused to take over arbitrary service principals. Patched Apr 9; public disclosure today.