Microsoft launches security controls for out-of-control AI agents

On October 19, 2026, Microsoft launched security controls for out-of-control AI agents. According to SiliconANGLE, the feature progressively reduces an agent's permissions when its risk score rises: the Discovery tool can identify 60 categories of local agents on employee devices, including Claude Code, Codex, and GitHub Copilot, and assigns each agent a separate identity through Entra Agent ID; Dynamic Agent Risk continuously updates the risk score based on identity, endpoint, cloud, and network signals, and Dynamic Conditional Access uses it to first revoke write permissions, then require human approval, and at the highest level directly isolate or stop the runtime. These features are grouped under Project Perception and Microsoft 365 E7, and Microsoft has not announced availability or pricing. On the same day, Satya Nadella said that he had previously written an article arguing that models should be treated as an internal risk and that security controls should be placed outside the model, and that today Microsoft is putting this principle into practice by extending Project Perception, adding capabilities to continuously assess agent risk, adaptively adjust permissions, and contain threats.

AI-generated from public reports

1. Oct 19· 4 reports

   Microsoft launches security control features for runaway AI agents

   Source:SiliconANGLE