Two Thirds of Companies Had a Cybersecurity Incident Caused by AI Agents in the Last Year. Most Have No Plan to Decommission Them.

The Cloud Security Alliance published a study today: 65% of organizations experienced at least one cybersecurity incident caused by AI agents in the past twelve months. Data exposure, operational disruption, financial losses. Unchecked AI agents operating on corporate networks.

The most striking finding: 68% of organizations claim high confidence in their visibility of AI agents on their network. But 82% of those same organizations discovered previously unknown agents in the past year. High confidence. No actual visibility. That gap is the incident.

The majority of organizations have no strategy for decommissioning AI agents. They deploy them. They forget about them. The agents keep running, keep accessing systems, keep taking actions, long after anyone is paying attention.

Two thirds of companies. One year. No oversight. This is not a future risk. It is the current reality documented by the world's leading cloud security research organization.