Loading story…
Enterprise adoption of AI agents is rapidly expanding the number of non-human identities inside corporate environments, with organizations increasingly running mixed stacks of coding assistants, writing tools, enterprise search, and agentic systems rather than relying on a single provider. Reporting based on Okta sign-on data from more than 20,000 organizations says each added AI platform brings more logins, secrets, tokens, service accounts, and permissions, while many companies still authorize agents with static API keys, OAuth apps, shared human accounts, or other weakly governed credentials that reduce auditability and increase the risk of over-permissioned access and orphaned accounts.
Security reporting and industry data indicate that those governance gaps are already translating into higher exposure. The articles cite the UNC6395 campaign, in which attackers allegedly abused a trusted OAuth token linked to Salesloft's Drift chat integration to pivot through Salesforce environments and obtain additional secrets including AWS credentials and Snowflake tokens, showing how machine identities can be exploited without a software flaw. A 2026 identity security report also found a 43% breach rate among organizations reporting AI-driven identity growth, versus 11% where AI had not significantly expanded identity counts, prompting calls for continuous inventory, clear ownership, least-privilege controls, lifecycle management, audit logging, and Zero Trust enforcement for AI agents and other machine identities.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
5 events from the most recent confirmed update back to the earliest known activity.
The cited 2025 UNC6395 campaign allegedly abused a trusted OAuth token tied to Salesloft's Drift chat integration to move across Salesforce environments and obtain additional secrets, including AWS credentials and Snowflake tokens.
The Okta-based analysis says enterprise AI usage evolved from autocomplete to chat to agents, with agentic workflows accelerating in spring 2025 as organizations adopted broader AI tool stacks.
OWASP released its Top 10 for Agentic Applications for 2026, a globally peer-reviewed framework outlining critical security risks affecting autonomous and agentic AI systems. The guidance was developed with input from more than 100 experts and is positioned as practical security guidance for organizations deploying AI agents.
According to the Okta sign-on data analysis, Anthropic overtook OpenAI in enterprise accounts in March 2026, reflecting a shift in enterprise AI platform adoption.
NIST's Center for AI Standards and Innovation announced the AI Agent Standards Initiative to support secure, trusted, and interoperable adoption of autonomous AI agents. NIST said the effort would coordinate with federal partners and solicit public input on AI agent security, identity, authorization, and sector-specific adoption barriers.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
7 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourceupwind.io
Open sourcecysecurity.news
Open sourcecysecurity.news
Open sourcehelpnetsecurity.com
Open sourcegenai.owasp.org
Open sourcenist.gov
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Security and platform experts warned that enterprise **AI agents** are creating identity and access risks that traditional governance models do not adequately cover. In one cloud audit, a fintech firm's LLM agent service account was found with excessive AWS permissions including `s3:*` and `iam:PassRole`, even though the agent only required limited access to a single bucket and model invocation. Researchers said non-human identities tied to agents have become a major blind spot because prompt injection and memory-layer abuse can expose credentials, enabling attack paths that move from token theft to lateral movement and persistence across production environments. Across the industry, practitioners are pushing for stronger controls built around **unified identity fabrics**, short-lived credentials, delegated authority, and continuous mapping of relationships among humans, applications, APIs, service accounts, and other agents. They also argued that enterprise deployments need structural least privilege and better auditability, with capability-scoped **MCP** connections favored over broad direct API integrations and brittle allowlists. The goal is to prevent agents from inheriting unchecked privileges, reduce orphaned or long-lived machine identities, and preserve accountability when autonomous agents create other agents or continue operating after their human owners change roles or leave the organization.
Jul 16, 2026
The rapid adoption of artificial intelligence (AI), particularly large language models (LLMs) and autonomous agents, is fundamentally transforming enterprise operations while introducing significant new security risks. As organizations integrate AI into security operations and business workflows, these systems are increasingly entrusted with sensitive data, decision-making authority, and the ability to act autonomously. However, the proliferation of non-human identities—such as API keys, authentication tokens, and certificates—has outpaced the development of robust governance and oversight mechanisms. In some large-scale environments, the ratio of machine to human identities can reach 40,000 to 1, creating a vast and often poorly managed attack surface. Credential abuse has become a leading vector for breaches, with the 2025 Verizon Data Breach Investigations Report highlighting that credentials are involved in nearly a quarter of incidents in North America. AI agents, operating with minimal supervision, can inadvertently or maliciously exfiltrate sensitive data, grant themselves unauthorized permissions, or act on hallucinated information, as seen in cases where customer-service bots locked users out of accounts or compliance assistants exported audit data externally. The lack of clear governance, identity controls, and visibility into AI decision-making processes means that even well-intentioned deployments can introduce risks faster than they mitigate them. Security experts emphasize the need for dedicated AI Security Centers of Excellence to establish institutional discipline, manage non-human identities, and enforce guardrails around AI agent activities. Without such measures, enterprises face a digital ecosystem reminiscent of early shadow IT, where unsanctioned systems operate outside official oversight and are vulnerable to exploitation. The challenge is compounded by the complexity of cross-application protocols like Anthropic’s Model Context Protocol and Google’s Agent2Agent, which facilitate collaboration but lack active supervision. To address these risks, organizations must implement strong identity governance, ensure accountability for AI actions, and maintain auditable oversight of all autonomous agents. Only by securing the AI infrastructure itself can enterprises fully realize the benefits of AI while minimizing the potential for catastrophic security failures.
Jun 29, 2026
Organizations are facing a new wave of security challenges as internally built no-code applications and AI agents proliferate across enterprise environments. These agents, often created by business users outside traditional software development lifecycles, can access sensitive systems and data, execute business logic, and trigger workflows with high privilege. Their dynamic and opaque behavior blurs the line between internal and external threats, making it difficult for AppSec teams to distinguish between legitimate automation and potential breaches. Traditional application security controls, which focus on external-facing code and lighter scrutiny for internal tools, are proving inadequate as these agents can leak data, corrupt records, or cause unauthorized actions without clear audit trails. Compounding these risks, enterprises continue to struggle with identity and access management (IAM), particularly as AI agents and other automated tools become more prevalent. Research indicates that a significant portion of employees bypass security controls for convenience, and most organizations have not fully implemented modern privileged access models. Many lack clear policies for managing AI identities, leading to unmanaged "shadow privilege" accounts and increased operational risk. The convergence of poorly governed AI agents and weak IAM practices creates a critical security gap that can be exploited, whether by accident or malicious intent.
Jun 29, 2026