The agent security gap: 54% of enterprises have already had an AI agent incident, and most still let agents share credentials
Across 107 enterprises, AI agents are being given real access to systems and data while the controls meant to contain them lag behind.
Across 107 enterprises, AI agents are being given real access to systems and data while the controls meant to contain them lag behind.
The short version
- More than half have already had a confirmed agent security incident or a near-miss; only about a third give every agent its own scoped identity, and most agents still share credentials; and only three in ten isolate their highest-risk agents.
- The result is an agent security gap — autonomous agents proliferating faster than the identity, isolation, and enforcement controls needed to hold them.
- The central finding is an agent security gap — the distance between the autonomy enterprises are granting their agents and the controls in place to contain them.
What happened
More than half of organizations (54%) have already experienced a confirmed agent security incident (18%) or a near-miss caught before harm (36%). When agents share credentials, a single compromised or over-permissioned agent carries a wide blast radius — and only three in ten enterprises (30%) isolate their highest-risk agents in sandboxes to bound that radius.
Why it matters
What makes the gap notable is how comfortable enterprises are inside it.
Summary by Nerd News Network. Read the full article at VentureBeat — AI via the links above and below.