In this episode of Know Your Adversary, Jared Atkinson and Justin Kohler sit down with Hope Walker and Elad Shamir to discuss Microsoft’s emerging agent identity ecosystem and the security challenges that come with it. They break down how agents, identities, blueprints, flows, and supporting resources interact across Microsoft platforms, and why understanding those relationships is becoming increasingly important.
The group explores how agent identities can cross traditional boundaries, inherit access through different identities, and introduce new attack paths. Hope and Elad discuss their work modeling these relationships in BloodHound to move beyond simple agent inventories and visualize who can control an agent, what identities it can act as, and what resources it can ultimately reach.
They also look at the challenges of securing a rapidly changing technology, from citizen-developed agents and overprivileged identities to MCP servers and evolving Microsoft permissions. The takeaway is that agents don’t operate in isolation, and understanding their security impact requires connecting them to the broader Entra and Azure graph.
Podden och tillhörande omslagsbild på den här sidan tillhör
SpecterOps. Innehållet i podden är skapat av SpecterOps och inte av,
eller tillsammans med, Poddtoppen.
