AI agents are the new unmanaged endpoints

Remember the late 2000s, when personal smartphones started showing up in enterprise environments? Employees were connecting personal devices to corporate Wi-Fi, syncing work email to iPhones and accessing internal systems from hardware the security team had never touched and had no authority over.

Security teams were caught entirely flat-footed. There was no policy. There was no governance. And by the time organizations started scrambling to respond, the devices were already everywhere.

I've spent more than 20 years in this industry, watching the same pattern repeat itself in different forms, across different technologies, with depressing reliability. Shadow IT. Cloud sprawl. Now AI agents.

The script is ...