{"id":61581,"date":"2026-10-19T13:00:00","date_gmt":"2026-10-19T13:00:00","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?p=150126"},"modified":"2026-10-19T13:00:00","modified_gmt":"2026-10-19T13:00:00","slug":"agents-are-your-newest-insiders-security-must-move-at-their-speed","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/agents-are-your-newest-insiders-security-must-move-at-their-speed\/","title":{"rendered":"Agents are your newest insiders.\u00a0Security must move at their speed.\u00a0"},"content":{"rendered":"

Agents are rapidly becoming part of how work gets done. They can support a range of activities from writing code and researching products to analyzing revenue, processing expenses, and acting across the systems that run the business. To be most useful, they often need access to company data, applications, tools, and other agents. That access is what makes agents more capable. With that capability can come insider risk.<\/p>\n

This does not mean agents are inherently malicious. It means they are capable tools that can be granted access to important systems by users. They can make mistakes, be manipulated, or be compromised. Their models can produce variable outputs, their context can change, and their plans can evolve as they work. An agent that operates as intended when a task begins may respond differently as context or inputs change. Depending on how they are designed and deployed, agents can operate continuously, at machine speed and scale. <\/p>\n

Satya Nadella, Chairman and Chief Executive Officer of Microsoft, recently described<\/a> the trust architecture this new era requires: we must separate the supply of intelligence from the authority over it. We should not ask a model to be its own security authority. The controls that determine what it can access, what actions it can take, and whether it should continue operating must sit outside the model, where the model cannot bypass or tamper with them. <\/p>\n

\n
\n

\u201cThe most trustworthy agentic system will not be the one with the model we trust most. It will be the one designed that enables us to trust the model least.\u201d<\/p>\n

Satya Nadella<\/cite><\/p><\/blockquote>\n<\/figure>\n

<\/figure>\n

Project Perception\u2014Securing your agentic insider<\/strong><\/h2>\n

We introduced Project Perception<\/a> and the Microsoft cyber stack to help organizations defend with agents. Today, we are extending Perception to secure the agentic insider<\/a>. Guardian Agents help security teams operate continuously, at machine speed and scale, while sensors, context, and actuators across the cyber stack help understand changing agent risk and continuously adapt protection in response. Project Perception and Microsoft Agent 365<\/a> share signals, context, and a unified registry giving IT and security teams a consistent view of agents and risk, with the controls each needs.<\/p>\n

\"Illustration<\/figure>\n

This builds on a simple security principle: surround non-deterministic intelligence with deterministic controls, independent evidence, and containment boundaries.<\/strong> Assume an agent can fail or be compromised. Observe it continuously. Minimize and tailor its authority before it acts. And continuously adjust that authority as risk changes.<\/p>\n

This requires protection across identity, permissions, data, endpoints, network, cloud, and runtime. The system has four continuous responsibilities:<\/p>\n