Loading story…
Organizations are rapidly increasing their deployment of AI agents, but traditional identity systems are struggling to keep pace with the unique security challenges these agents introduce. Unlike static applications, AI agents make autonomous decisions, dynamically discover credential needs, and often create complex authentication chains, leading to over-provisioned access and audit trail gaps. Task-based AI agents, in particular, are prone to credential scope mismatches, where they are granted broader access than necessary, increasing the risk of unauthorized data exposure. The article outlines four major AI agent architectures, detailing the specific identity security risks each presents and offering targeted mitigation strategies.
Simultaneously, the rise of AI search crawlers is reshaping how web content is indexed and accessed by AI-powered search experiences. These crawlers, such as Amazon Kendra, iAskBot, Claude-SearchBot, PerplexityBot, and OAI-SearchBot, are exhibiting rapid and volatile growth in activity, outpacing traditional fetcher bots. The evolving landscape of AI bot activity, including the emergence of distinct user agents for AI search, highlights the need for organizations to adapt their security and monitoring practices to address new patterns of automated access and potential data collection risks posed by these advanced AI agents and crawlers.
Track how attackers are adapting to this technology.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The rapid integration of AI platforms and agentic workflows into enterprise environments is creating new security challenges, particularly through the accumulation of AI technical debt and the proliferation of legitimate bot traffic. AI technical debt arises when organizations rush to deploy AI systems without addressing foundational security and governance issues, such as poorly managed data pipelines, overly permissive access controls, and deferred architectural decisions. These shortcuts expand the attack surface, erode data visibility, and make systems more difficult to maintain or secure, increasing the risk of significant breaches as AI systems evolve and interact with more environments. Simultaneously, the rise of legitimate bots—including search engine crawlers, AI model scrapers, and agentic AI systems—has introduced a growing blind spot for security teams. While these bots are not inherently malicious, their large-scale, persistent interactions with web applications and APIs can degrade performance, increase operational costs, and expose sensitive content. Traditional bot management strategies, such as static allow/deny lists, are proving inadequate in this AI-driven landscape, as legitimate automation often bypasses conventional controls and blends into normal traffic patterns. Security teams must now adapt by improving visibility, historical context, and governance to address these evolving risks.
Jun 29, 2026
Organizations are increasingly focused on securing AI agents and the data they access, as the convergence of data security and AI security platforms becomes a critical concern for enterprise environments. Industry analysis highlights the shift from traditional data loss prevention (DLP) and data security posture management (DSPM) tools toward integrated platforms that provide context-aware runtime controls for AI-driven systems. Security leaders are evaluating how platforms like Cyera and solutions from vendors such as 1Password are addressing the unique risks posed by autonomous agents, including the need for robust identity management and real-time monitoring of agent activities. Recent discussions among cybersecurity experts emphasize the importance of securing credentials in browser-based AI workflows and the foundational role of identity in protecting AI agents. Enterprises are advised to log AI agent activities, address prompt injection vulnerabilities, and adapt to the rapid evolution of deepfakes and other AI-driven threats. Nonprofit organizations and businesses alike are seeking accessible, collaborative solutions to build digital resilience and ensure that AI adoption does not introduce unacceptable risks to sensitive data and operations.
Jun 29, 2026
The rapid adoption of artificial intelligence (AI), particularly large language models (LLMs) and autonomous agents, is fundamentally transforming enterprise operations while introducing significant new security risks. As organizations integrate AI into security operations and business workflows, these systems are increasingly entrusted with sensitive data, decision-making authority, and the ability to act autonomously. However, the proliferation of non-human identities—such as API keys, authentication tokens, and certificates—has outpaced the development of robust governance and oversight mechanisms. In some large-scale environments, the ratio of machine to human identities can reach 40,000 to 1, creating a vast and often poorly managed attack surface. Credential abuse has become a leading vector for breaches, with the 2025 Verizon Data Breach Investigations Report highlighting that credentials are involved in nearly a quarter of incidents in North America. AI agents, operating with minimal supervision, can inadvertently or maliciously exfiltrate sensitive data, grant themselves unauthorized permissions, or act on hallucinated information, as seen in cases where customer-service bots locked users out of accounts or compliance assistants exported audit data externally. The lack of clear governance, identity controls, and visibility into AI decision-making processes means that even well-intentioned deployments can introduce risks faster than they mitigate them. Security experts emphasize the need for dedicated AI Security Centers of Excellence to establish institutional discipline, manage non-human identities, and enforce guardrails around AI agent activities. Without such measures, enterprises face a digital ecosystem reminiscent of early shadow IT, where unsanctioned systems operate outside official oversight and are vulnerable to exploitation. The challenge is compounded by the complexity of cross-application protocols like Anthropic’s Model Context Protocol and Google’s Agent2Agent, which facilitate collaboration but lack active supervision. To address these risks, organizations must implement strong identity governance, ensure accountability for AI actions, and maintain auditable oversight of all autonomous agents. Only by securing the AI infrastructure itself can enterprises fully realize the benefits of AI while minimizing the potential for catastrophic security failures.
Jun 29, 2026