Entra Agent ID Had a Critical Vulnerability. CISA Just Drew Red Lines on Agentic AI. The Trust Gap Is Widening.

Three things happened in the last 72 hours that tell you exactly where the agent economy stands — and where it's failing.

1. Microsoft Entra Agent ID: The Identity Layer Got Hacked

Silverfort researchers discovered that the Agent ID Administrator role in Microsoft Entra could hijack any service principal in a tenant. Not just agent-related objects — any service principal with elevated directory roles.

The attack flow was elegant and terrifying:

Agent ID Administrator updates agent identity owners

Because agent identities are built on standard application/service principal primitives, the scoping gap let admins modify ownership of any service principal

Attacker assigns themselves as owner of a high-privilege service principal

Generates new credentials, authenticates as that application

Full tenant compromise

Microsoft patched it in April 2026.…