Microsoft and ServiceNow's exploitable agents reveal a growing - and preventable - AI security crisis

Follow ZDNET: Add us as a preferred source on Google.

ZDNET's key takeaways

• Researchers discover exploitable agentic AI technologies from ServiceNow and Microsoft.
• Securing agentic AI is already proving to be extremely challenging.
• Cybersecurity pros should adopt a "least privilege" posture for AI agents.

Could agentic AI turn out to be every threat actor's fantasy? I suggested as much in my recent  "10 ways AI can inflict unprecedented damage in 2026."

Once deployed on corporate networks, AI agents with broad access to sensitive systems of record can enable the sort of lateral movement across an organization's IT estate that most threat actors dream of.   

Also: 10 ways AI can inflict unprecedented damage in 2026

How 'lateral movement' nets threat actors escalated privileges

According to Jonathan Wall, founder and CEO of Runloop -- a platform for securely deploying AI agents ...