Tuesday, August 18, 2026

Time: 11:00 AM ET/ 10:00 PM CT
Format: Live Webinar

Attackers are shifting from user accounts to a fast-growing and often overlooked identity attack surface: non-human identities. App registrations, service principals, managed identities, enterprise applications, and AI agents now hold powerful access across Microsoft Entra ID and Azure, often with standing permissions, limited oversight, and no MFA.

In this webinar, identity security expert Craig Birch will break down the real-world attack paths adversaries use to compromise non-human identities and turn them into tenant-wide access. Drawing from public research and recent incidents, Craig will examine illicit consent grants, service principal privilege escalation, Exchange Online service principal abuse, OAuth client ID spoofing, managed identity compromise, and emerging AI agent risks.

You will leave with a practical understanding of the permissions that create risk, the techniques attackers are using now, and the governance, monitoring, and recovery strategies needed to reduce exposure across workload and agent identities.

What You’ll Learn:

• Why non-human identities have become high-value attacker targets.
• Which Microsoft Graph and application permissions create the greatest risk.
• How real-world attacks abuse apps, service principals, managed identities, and OAuth flows.
• Why AI agents introduce a new class of identity risk.
• How to improve detection, governance, and recovery before these attack paths are exploited.

Who Should Attend:

IAM professionals, Microsoft Entra ID administrators, security architects, SOC analysts, cloud security teams, and security leaders responsible for strengthening identity resilience across hybrid and cloud-first environments.