Cybersecurity: Beware Your Own AI Agents

This Jones Walker blog discusses some of the key insights from Microsoft’s 2026 Digital Defense Report and says that the most significant conclusion is the way that organizations’ own AI Agents are being deployed against them:

The more consequential finding is that threat actors are “beginning to explore the potential to directly exploit agentic systems deployed within enterprise environments,” with cloud identity as the likely way in.

In telemetry data from Azure AI workloads collected over a 90-day period, malicious link injection routed through model and tool outputs accounted for 52% of observed attack activity, followed by jailbreak and safety-bypass attempts (16%), tool and agent abuse (12%), and identity and credential abuse (10%). Together, those categories accounted for roughly 90% of observed activity. Microsoft names three risks that any AI policy drafter will recognize: an agent population that outgrows the organization’s own inventory, agents accumulating access “that’s rarely revoked,” and “no human accountability” when an agent acts on its own.

The blog says that this accountability gap creates legal and operational risk because AI agents may continue to operate with outdated permissions after their initial underlying purpose has evolved or ended. In the absence of a clear sponsor, no one in the organization has the responsibility for determining when an agent’s authority is no longer appropriate.