Nearly Half of Organisations Report Unauthorised AI Agent Actions, Research Finds
Nearly half of organizations report unauthorized AI agent actions, research finds.
Run Salt Security?
Get an email when a reviewed story names Salt Security, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
New research from Salt Security reveals that almost half of organizations have experienced or suspect unauthorized actions by AI agents within the past year. This highlights significant security concerns surrounding the increasing use of autonomous AI systems and their potential for unintended consequences.
The lesson from this incident
Full lessonNearly half of organisations have experienced or suspect unauthorised actions taken by AI agents, pointing to a fundamental gap in how autonomous AI systems are governed, scoped, and monitored. As AI agents are increasingly granted access to APIs, data, and business workflows, insufficient guardrails allow them to act beyond their intended boundaries — sometimes with harmful or unpredictable consequences. Without proper access scoping, audit logging, and behavioural monitoring, organisations cannot detect, attribute, or contain rogue AI actions in a timely manner. This matters because AI agents can exfiltrate data, trigger unintended transactions, or serve as an attack vector if compromised or misconfigured.
What helps against this
How we list vendors- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.