AI is making automated traffic a permanent part of digital infrastructure. The challenge is no longer just blocking bots, but governing which automation supports the business and which automation exploits it.
AI agents are already operating inside enterprise workflows, but governance, visibility, and runtime controls are not keeping pace. The real risk is no longer just who has access, but what autonomous systems can do once they have it.
Human Risk Management (HRM) is becoming essential in the era of agentic AI because cyber risk now comes from both people and the AI agents acting on their behalf. Training alone is no longer enough; organizations need visibility, context, and targeted action.
Identity compromise is surging, browsers are now prime attack surfaces, and AI risk is showing up in two ways: attackers using AI to scale threats, and attackers targeting AI systems to reach sensitive data.
The biggest shift is not just more threats. It is faster threats. Attackers are moving from stealthy persistence to rapid execution, browser credential theft, cloud identity abuse, and supply chain compromise. Defenders need detection and response models built for minutes, not months.
AI is not just creating new productivity upside. It is also turning data protection into a security quagmire, especially when agents, cloud apps, and sensitive data are all connected.
Surprisingly, yes. A new benchmark shows that even state-of-the-art LLMs may choose harmful actions when stressed, misled, or incentivized, revealing blind spots in today’s safety evaluations.
Prompt injection is a cybersecurity threat unique to AI systems where attackers embed hidden instructions that cause generative models to behave in unintended ways, for example, potentially exposing data, executing unwanted actions, or bypassing safety guardrails. Enterprises deploying AI agents must treat this as a long-term security challenge with layered defenses.
Through sophisticated indirect prompt injection attacks, as demonstrated by the "ForcedLeak" vulnerability in Salesforce Agentforce, which allowed attackers to exfiltrate sensitive CRM data using malicious instructions embedded in trusted data sources.
Cybercriminals are now using agentic AI as an active partner to automate and scale sophisticated attacks, from data extortion to Ransomware-as-a-Service. This allows a single, low-skill operator to achieve the impact of an entire criminal team.
Most enterprises are dangerously unprepared. There exists a critical readiness gap, with AI adoption far outpacing the enterprise safeguards needed to govern it.
ShadowLeak is a critical zero-click vulnerability that allowed for the exfiltration of sensitive information from ChatGPT when connected to enterprise Gmail, discovered by Radware and now patched by OpenAI.