Key points
- Microsoft 365 E7 includes new capabilities to contain agent risk.
- Project Perception helps organizations adapt protection continuously.
- The company treats autonomous agents as the newest type of insider threat.
Microsoft has introduced new security capabilities in Microsoft 365 E7 and Project Perception to help organizations manage the risks posed by autonomous AI agents, which the company now classifies as digital insiders that require specialized protection.
How it unfolded
- Microsoft published research on the Microsoft Security Blog titled "Agents are your newest insiders. Security must move at their speed."
- The publication highlights new capabilities within Microsoft 365 E7 designed to contain agent risk.
- The company also detailed Project Perception, a tool intended to help organizations adapt their security protections continuously.
Who is affected
Organizations deploying autonomous AI agents within their enterprise environments are the primary audience for these updates. According to the Microsoft Security Blog, these agents function similarly to human employees but operate at a much higher speed and scale. This means traditional security models designed for human users may not be sufficient to monitor or control the actions of these automated systems.
The release of Microsoft 365 E7 signals a shift in how enterprise software providers are addressing the security implications of generative AI. By integrating specific protections into a productivity suite, Microsoft aims to provide a baseline of security for organizations that are adopting these technologies. The involvement of Project Perception suggests that this is an ongoing effort to refine these protections as the technology evolves.
What happens next
Organizations using Microsoft 365 will need to evaluate whether their current security strategies account for the unique behavior of AI agents. The introduction of these tools implies that Microsoft expects more enterprises to deploy autonomous agents in the near future. Security teams will likely need to configure these new features to ensure that agents operate within defined boundaries and do not expose sensitive data or systems to unintended risks.
The continuous adaptation mentioned in the blog post indicates that this is not a one-time fix. As AI agents become more sophisticated, the security measures protecting them will also need to evolve. This suggests a long-term commitment from Microsoft to address the dynamic nature of AI-driven threats.
The background in plain language
Autonomous AI agents are software programs that can perform tasks independently, making decisions without constant human oversight. Unlike traditional software that follows a strict set of instructions, these agents can adapt to new situations and interact with various systems. This autonomy creates new security challenges because the agent might access data or perform actions that were not explicitly authorized. Security teams must now monitor these agents as if they were employees, ensuring they do not misuse their access privileges or fall victim to manipulation.
Background: Insider threats
You detect insider threats by correlating identity logs with data access patterns. Look for impossible travel, abnormal data exfiltration volumes, and privilege escalation outside standard workflows. Combine automated monitoring with manual review of high-risk accounts to catch anomalies that automated tools miss.
Read the full guide: Detecting Insider Threats: Log Signals, Blind Spots, and Hidden Costs
What to do and how to stay safe: Microsoft
- Review current access policies to ensure they account for non-human identities and automated systems.
- Monitor logs for unusual activity patterns that may indicate an AI agent is behaving outside its intended scope.
- Verify that any deployed AI agents have strict boundaries on the data they can access and the actions they can perform.
- Stay informed about updates to security tools that specifically address the risks associated with autonomous software agents.
Step-by-step guide: Mobile Device Security for Small Business: Control Without Cost
General security guidance from the Circuit Observer newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is Microsoft 365 E7?
Microsoft 365 E7 is a product tier that includes new capabilities designed to help organizations contain the security risks associated with autonomous AI agents.
What is Project Perception?
Project Perception is a Microsoft initiative that helps organizations adapt their security protections continuously to address the evolving risks posed by AI agents.
Why are AI agents considered insiders?
Microsoft classifies AI agents as insiders because they operate within an organization's systems and have access to data and resources, similar to human employees, but at a faster speed and scale.
