Forgotten AI agents may still access sensitive company data

About 76% of enabled AI agents examined in customer production environments had not run in 60 days yet retained credentials and connections to company systems, according to Arrakis Security's 2026 Autonomous Agents Threat Report. The analysis, covering thousands of agents over a 12-week period, found that dormant agents can still read and write data, call tools and start workflows, leaving access available through inactive software.

AI agents that have not run recently retain credentials and connections to company systems, according to Arrakis Security’s 2026 Autonomous Agents Threat Report. About 76% of enabled agents examined had not run in 60 days, leaving access available through inactive software. Agents by exposure family Source: Arrakis Security The analysis covered thousands of agents in customer production environments over a 12-week period. These programs can read and write data, call tools and start workflows, giving … More https://www.helpnetsecurity.com/2026/10/26/arrakis-dormant-ai-agent-risks-report/ The post Forgotten AI agents may still access sensitive company data https://www.helpnetsecurity.com/2026/10/26/arrakis-dormant-ai-agent-risks-report/ appeared first on Help Net Security https://www.helpnetsecurity.com .