Defense in depth for autonomous AI agents

Microsoft Security Blog roundup covering defensive guidance and active threats: guidance on evolving defense-in-depth for autonomous AI agents (application-layer controls, identity, human oversight); deep analysis of the Kazuar P2P botnet attributed to Russian actor Secret Blizzard; multiple AI-related risks including exploitable misconfigurations in cloud-native/Kubernetes AI apps that can lead to RCE and data leaks and prompt-injection flaws in agent frameworks that can achieve remote code execution; research on AI-assisted synthetic attack log generation to accelerate detection engineering;