Microsoft targets rogue AI agents with dynamic permissions and risk scoring

Microsoft now treats the AI agents running inside corporate networks as potential insider threats. On October 19, 2026, the company unveiled a set of security features built to keep enterprise AI agents on a short leash. The headliners are Dynamic Permissions, Dynamic Agent Risk, and Dynamic Conditional Access. Together, they hand agents minimal access at the start and adjust it in real time as risk signals shift. What Microsoft actually announced Dynamic Permissions handles the first part: starting agents from nothing and expanding access only as needed. Dynamic Agent Risk scores how risky an agent looks based on various indicators. Dynamic Conditional Access then uses that score to decide what the agent is allowed to do at any given moment. Enforcement is graduated rather than all-or-nothing. Microsoft says the system can cut an agent’s ability to write data while still letting it read. It can also require a human to approve specific actions before the agent carries them out. Microsoft Defender is also getting better at spotting what is out there. The tool can now identify up to 60 different types of AI agents, up from 25 previously. That reflects 35 new agent types added in rece...