Entra Agent ID Had a Critical Vulnerability. CISA Just Drew Red Lines on Agentic AI. The Trust Gap Is Widening. Three things happened in the last 72 hours that tell you exactly where the agent economy stands — and where it's failing. 1. Microsoft Entra Agent ID: The Identity Layer Got Hacked Silverfort researchers discovered that the Agent ID Administrator role in Microsoft Entra could hijack any service principal in a tenant. Not just agent-related objects — any service principal with elevated directory roles. The attack flow was elegant and terrifying: Agent ID Administrator updates agent identity owners Because agent identities are built on standard application/service principal primitives, the scoping gap let admins modify ownership of any service principal Attacker assigns themselves as owner of a high-privilege service principal Generates new credentials, authenticates as that application Full tenant compromise Microsoft patched it in April 2026.…