buildConfirmed2 publishers Microsoft made Microsoft Execution Containers, its policy layer for limiting what AI agents can touch, generally available on Windows on October 7. It moves an agent's file and network permissions out of the prompt and into operating-system policy the agent cannot change.
Perspective Coverage
3 publishers
- Builder
- Builder 45%
- Operator
- Operator 28%
- Investor
- Investor 27%
Reality
- Evidence55
- Adoption35
- Hype gap+30
- Incentives65
- Confidence70
SecurityWeek argues for in-call deepfake detection with help desk breaches it never ties to AI
SecurityWeek says awareness training has failed against help desk vishing, citing attacks that cost MGM an estimated $100 million. The fix it profiles is Netarx's live-call scanner for cloned voices and spoofed devices, but in both breaches it cites, callers talked help desk staff into granting access.
Reality
- Evidence35
- Adoption
- Not scored
- Hype gap+45
- Incentives
- Not scored
- Confidence55
Windows 11 26H2 turns on settings backup for Entra-joined PCs whose admins never set the policy
Microsoft has switched Windows settings backup on by default for Entra-joined and hybrid-joined PCs upgraded to Windows 11 26H2, released September 29. Tenants that never set the policy now copy users' settings and Store app lists until an admin turns it off.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap0
- Incentives
- Not scored
- Confidence64
Missing token signature check gave a 16-year-old admin SQL on a Microsoft analytics service
Faav, a 16-year-old researcher, reached admin SQL over 17.3 trillion rows on Microsoft's Titan service because it never checked login-token signatures. Microsoft locked the endpoint four days after his report and paid a $5,000 bounty.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+35
- Incentives55
- Confidence55
buildConfirmed5 publishers Microsoft is splitting Copilot into Home, Code and Autopilot, with its always-on Autopilot agent entering private preview in late September. Autopilot agents carry their own identities and bill by usage, so tenant admins need access reviews and spend plans ready before the first instances arrive.
Perspective Coverage
5 publishers
- Builder
- Builder 33%
- Operator
- Operator 39%
- Investor
- Investor 28%
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+35
- Incentives65
- Confidence60
Microsoft's Copilot Managed Runtime runs user-built apps inside the Microsoft 365 tenant
Microsoft put Copilot Managed Runtime into public preview, hosting code from three Copilot builders and third-party tools like Lovable inside the M365 tenant. For security teams the launch is a policy job over who may deploy code that reads tenant data.
Reality
- Evidence40
- Adoption20
- Hype gap+25
- Incentives80
- Confidence45
Windows takes over enforcing the agent limits developers declare
Microsoft's Execution Containers SDK, previewed at Build 2026, lets a developer state what an agent may touch and leaves Windows to apply that at runtime, with Entra and Intune setting the policy per agent.
Publishers:blogs.windows.com
Reality
- Evidence40
- Adoption22
- Hype gap+25
- Incentives88
- Confidence60
CoreWeave launches Remote Key Encryption, keeping customer data keys out of its own cloud
CoreWeave says key custody is what keeps enterprise AI projects sitting in security review, so its new encryption service leaves the key in tooling the customer already runs and takes the provider off the decrypt list.
Reality
- Evidence36
- Adoption10
- Hype gap+22
- Incentives80
- Confidence56
A rogue Entra MFA provider captures plaintext passwords inside a sign-in that still succeeds
Varonis Threat Labs registered its own External Authentication Method in a test Entra tenant and served a copy of Microsoft's password prompt during the second factor. Every sign-in completed, and the passwords landed in a file.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+20
- Incentives75
- Confidence55
buildOne report1 publisher Cloudflare's optional_scopes array moves the agent permission check to runtime
OAuth always allowed a token narrower than the request. What changes is that the client owner now declares which scopes a user may refuse, and the application has to read the token response to learn what it actually got.
Reality
- Evidence68
- Adoption22
- Hype gap+8
- Incentives58
- Confidence70
Three items, one tier: Keycloak's reset bug, an N-able password leak, a Grok data-theft trick
A single Stormcast episode carries a Keycloak 26.7.2 password-reset fix, a reported N-able password manager leak, and a published LLM safeguard bypass. Most of it sits in the identity and secrets tier.
Reality
- Evidence52
- Adoption
- Not scored
- Hype gap+14
- Incentives34
- Confidence55
Microsoft puts AI agents in Entra, which makes agent sprawl an identity team problem
Agent 365 pushes agents into the same registry, access policies and e-discovery used for staff. That moves the governance work onto teams you already fund.
Reality
- Evidence26
- Adoption
- Not scored
- Hype gap+46
- Incentives92
- Confidence38
Unit 42's Credential Brief: Hunt The Login That Succeeds Right After The Failures
TheHatman's claimed Entra haul and the FortiBleed spraying wave share one detectable seam: a successful authentication landing just behind a spike of failures.
Reality
- Evidence46
- Adoption58
- Hype gap+12
- Incentives78
- Confidence44