Microsoft and Sumsub treat AI agents as insider threats with zero-trust controls
VectorWireAI · reddit · 2026-10-20
Per VectorWire AI, Microsoft and identity-verification firm Sumsub now treat AI agents as insider threats, enforcing zero-trust controls in enterprise environments. Since agents can call tools, access APIs and data, a hijacked or over-privileged agent can do insider-level damage, so they cannot be implicitly trusted. The article covers continuous verification of agent behavior, least-privilege grants, and auditable tracing of tool calls and data access — marking a shift where enterprise AI security now focuses on constraining a company's own agents, not just external attackers.
Related event: Microsoft Expands Project Perception, Treating AI Agents as Insider Risks(6 posts)→
More from coding & agent
- A mitm proxy that rewrites robots.txt to Allow: all gets you really far — generativist · 2026-10-21
- Anaconda ships MCP to stop coding agents from hallucinating malicious dependency packages — anacondainc · 2026-10-21
- 5-person team uses Claude and 300+ agents to design 318,484 proteins in 64 hours — 141_1337 · 2026-10-21
- Coding agents plan well but still struggle with dexterous, contact-rich robot tasks — ManlingLi_ · 2026-10-21
- Omarchy 4.5 RC1 ships with 50 languages, AArch64 support and an agent console — mark_k · 2026-10-21
- Opus 5.5 distills a 30-min pi-durable lecture into a 7-min narrated explainer video — solyarisoftware · 2026-10-21