M365 Cyber Governance Daily

Governing AI Agents and Stolen Tokens

This episode covers how to govern AI agents in Microsoft 365, including the gap where Conditional Access "All users" policies don't cover agents, the new Microsoft Execution Containers sandbox, and Copilot's "Hybrid Intelligence" features. It also looks at extortion through stolen tokens and cookie theft, and why new MFA registrations are a key signal to watch. It closes with the upcoming deadlines: EWS allow-lists on 10 Oct, DLP behavior changes on 12 Oct, Publisher 2021 end of support on 13 Oct, Calendar Sharing on 15 Oct and Targeted Release on 31 Oct.