Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal systems, and works without anyone watching.
Nobody reviewed its access. Nobody owns it.
If an employee had that much reach with that little oversight, you would call it an insider risk. So why do we still call the agent a productivity tool?
SOURCE:
INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105
A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a
Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed “anomalous activity” related to systems that store customer environment variables. Upon further investigation,