Leaders worry that AI agents will introduce entirely new cybersecurity threats. In reality, the biggest risk isn’t what AI creates, but what it reveals. While AI agents don’t invent weak governance or poor access controls, they do expose years of accumulated organizational shortcuts, or tech debt, that people learned to work around. AI can exploit those shortcuts at machine speed. In many organizations, access controls have quietly deteriorated over time. Permissions get copied from one employee to the next, people change roles without losing old access and files are shared “temporarily” but never reviewed. AI agents don’t create these problems, but they do remove the friction that once kept sensitive information buried, surfacing it instantly in search results, summaries and prompts.

Full report : AI Agents Aren’t Creating Security Problems. They’re Revealing Them.