The BeyondTrust Blog

Catch up on identity security and PAM trends, cybersecurity best practices, expert research and opinions, and BeyondTrust news and product updates.

Latest Blog Articles

• A Security Researcher’s Guide to Understanding Copilot Studio AI Agents

  A guide to understanding Copilot Studio AI agents, their deeper architecture on Entra ID and APIM, and key security risks.

Reading Time: 3 mins

• Introducing PathfinderAI and MCP Server: Simplifying Privilege-Centric Identity Security by Using AI on Your Terms

  Security teams are drowning in disconnected tools, manual reporting, and complex identity data. PathfinderAI, built into the BeyondTrust Pathfinder Platform, introduces natural language intelligence to simplify identity security operations. With MCP Server integration, organizations can securely extend these capabilities across AI ecosystems like Microsoft Copilot and ServiceNow—transforming how teams analyze, prioritize, and remediate privilege risks.

Reading Time: 8 mins

• The Proper Zero Day Vulnerability Definition

  In cybersecurity, “zero day” is frequently diluted and used as a catch-all for any unpatched vulnerability. This article breaks down the three mandatory elements of a true zero day, illustrating why the distinction between a zero day and a known, but unpatched, flaw is critical for effective defense.

Reading Time: 6 mins

• Claude & Control: An Introduction to Agentic C2 with Computer Use Agents

  This blog explores how computer use agents can be used to build an agentic command-and-control framework. By combining LLM reasoning with desktop interaction tools, attackers could automate endpoint control while blending into normal system behavior. Here, we break down the architecture, abuse scenarios, and detection opportunities.

Reading Time: 12 mins

• Pwning AI Code Interpreters in AWS Bedrock AgentCore

  Phantom Labs discovered that AWS Bedrock AgentCore Code Interpreter’s sandbox mode allows DNS queries, enabling bypass of network isolation through DNS-based command-and-control. This research details the discovery, proof-of-concept exploit, disclosure timeline, and defensive guidance for organizations using Code Interpreter workloads.

Reading Time: 10 mins

• Securing Agentic AI Workloads with Visibility and Privileged Control

  Comprehensive visibility and privileged control provide the necessary foundation for securing agentic AI workloads against emerging identity threats.

Reading Time: 6 mins