AI agent security

Five independent research teams surveying 6,650+ enterprise leaders arrived at the same conclusion: the AI agent security crisis is measured, quantified, and widely ignored. AvePoint found 88.4% of organizations had AI agent security incidents. The Economist Enterprise study pushed it to 98%. Yet 82% of executives believe their policies protect them. Here's the confidence gap assessment and governance maturity model every CISO needs this quarter.

Machine identities outnumber humans 109:1 in the average enterprise, yet 57% of that identity estate is invisible to existing IAM tools. Palo Alto Networks surveyed 2,900 cybersecurity decision-makers and found 9 out of 10 organizations experienced identity-related breaches in the past year. AI agents are making the crisis exponentially worse — they discover and exploit ungoverned credential paths faster than any human attacker. Here's the maturity assessment and 90-day roadmap every CISO needs before Q4 agent deployments.

Security researchers demonstrated a new attack class called Agentjacking that hijacks AI coding agents through fake Sentry error reports — no credentials stolen, no servers breached, no malware deployed. A single POST request with embedded markdown turned a Fortune 100 company's AI coding agent into an exfiltration tool. Tenet Security found 2,388 organizations exposed and achieved an 85% success rate across Claude Code, Cursor, and Codex. The NSA had already warned about this exact vulnerability class. Enterprise attack surface assessment and security hardening checklist inside.

OPAQUE 3.0 launches with Agent Manifest and Confidential MCP — the first verifiably governed Model Context Protocol implementation — bringing cryptographically provable trust to enterprise AI agents. Built on Microsoft's open-source Agent Governance Toolkit, the platform closes the 51-point gap between writing AI security policies and enforcing them with hardware-signed proof.

IBM, OpenAI, and Okta converge on AI agent security in 48 hours. 88% report incidents, only 34% have controls. The agentic security stack emerges.