ctrlINT What the industry said about every indicator, with the quote

hxxps://login.microsoftonline[.]com/adcb5820-70a1-4272-b79c-32f2bba44ddc/oauth2/v2.0/authorize?client_id=14d82eec-204b-4c2f-b7e8-296a70dab67e&response_type=code&redirect_uri=http://localhost/&response_mode=query&scope=api://beddadf7-4f3b-4e9b-8443-0b0cf777446e/access_agentURL

Reported by 1 independent source · first reported by Red Canary · last reported

Last reported 4 months ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “hxxps://login.microsoftonline[.]com/adcb5820-70a1-4272-b79c-32f2bba44ddc/oauth2/v2.0/authorize?client_id=14d82eec-204b-4c2f-b7e8-296a70dab67e&response_type=code&redirect_uri=http://localhost/&response_mode=query&scope=api://beddadf7-4f3b-4e9b-8443-0b0cf777446e/access_agent”

    Red CanaryVendor
    Investigating suspicious AI workflows in Microsoft Entra Agent ID: Assistive agents

Indicators reported together

named in the same reports
Copy these 4 indicators · defanged

Thanks — we review every report.

Report a wrong value
What is wrong with hxxps://login.microsoftonline[.]com/adcb5820-70a1-4272-b79c-32f2bba44ddc/oauth2/v2.0/authorize?client_id=14d82eec-204b-4c2f-b7e8-296a70dab67e&response_type=code&redirect_uri=http://localhost/&response_mode=query&scope=api://beddadf7-4f3b-4e9b-8443-0b0cf777446e/access_agent here?
No account needed. We do not store your IP address.