AI agents that have not run recently retain credentials and connections to company systems, according to Arrakis Security’s 2026 Autonomous Agents Threat Report. About 76% of enabled agents examined had not run in 60 days, leaving access available through inactive software. Agents by exposure family (Source: Arrakis Security) The analysis covered thousands of agents in customer production environments over a 12-week period. These programs can read and write data, call tools and start workflows, giving … More
The post Forgotten AI agents may still access sensitive company data appeared first on Help Net Security.
source & further reading
helpnetsecurity.com — original article
Google open-sources the Elephant-Goldfish Model plugin its engineers use to catch AI coding mistakes
Hackers hijack exposed AI models to launch cyberattacks at victims’ expense
New infosec products of the week: October 23, 2026