TI Mindmap HUB
Threat Intelligence Report

BluePhishing: Initial Access via Third-Party Agent Blueprint Consent

📅 November 11, 2026 📰 www.proofpoint.com 🔍 0 CVE(s) referenced

Proofpoint’s BluePhishing proof of concept shows how attackers could abuse Microsoft Entra agent blueprint consent to create up to 250 privileged agent identities, gain persistent tenant access, and scale post-exploitation through poorly governed AI identity flows.

vendor

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle