{"id":991,"date":"2026-05-20T16:00:25","date_gmt":"2026-05-20T16:00:25","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=991"},"modified":"2026-05-20T16:00:25","modified_gmt":"2026-05-20T16:00:25","slug":"agent-ai-is-coming-are-you-ready","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=991","title":{"rendered":"Agent AI is Coming. Are You Ready?"},"content":{"rendered":"<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">The Hacker News<\/span><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">May 20, 2026<\/span><\/span><span class=\"p-tags\">Identity Security \/ Enterprise Security<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjjYQaF0euKIc86WLed9RLojSVHUNrnpx7_OeZHvmaPtnFPmL3WrhC-DU-7asOtrYx8fBGP-UCdxI1QljVgaT_wYA6uIye4yHpzpk-uSQb934K7NDSPn-jFJR63cEeUZ8SsDevlcvX-O62_-C8HZeVreeg2aB5stt6z9kluLUvIUgXAGVpAMccDc19lrsmK\/s1700-e365\/agentai.gif\" style=\"clear: left; display: block; float: left;  text-align: center;\"><\/a><\/div>\n<h2>New Industry Data Just Released Suggests Not.<\/h2>\n<p>On May 19th, 2026, Orchid Security released the results of our <a href=\"https:\/\/eu1.hubs.ly\/H0vnm4Z0\">Identity Gap: Snapshot 2026.<\/a> Among the findings, \u00abidentity dark matter\u00bb (the unseen, unmanaged elements of identity) now overshadows the visible elements 57% vs. 43%. And it couldn&#8217;t have occurred at a worse time, with enterprises embracing Agent AI with both arms (and unfortunately, as Orchid co-founder Robert Wiseman explains, more than one eye closed).\u00a0<\/p>\n<p><iframe loading=\"lazy\" title=\"What Is the Identity Gap? | Orchid Security\" width=\"500\" height=\"281\" src=\"https:\/\/www.youtube.com\/embed\/cDozMaQJgow?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe><\/p>\n<p><a name=\"more\"\/><\/p>\n<h2 style=\"text-align: left;\">Why the concern, you may ask?<\/h2>\n<p>AI agents are <a href=\"https:\/\/eu1.hubs.ly\/H0vmZWB0\">shortcut-seekers by design<\/a>. When given a task, they are trained to find the most efficient way to complete it, with the speed of machines and the creativity of humans. Denied access to a necessary system? Use a hard-coded credential stored in plaintext within the application. Need information they aren&#8217;t entitled to read? \u00abBorrow\u00bb a credential with higher privilege. Constantly being challenged across many different systems? Grab a broadly accepted token. Truly, Agent AI&#8217;s creativity is remarkable. It just cuts both ways.<\/p>\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/eu1.hubs.ly\/H0vmZWB0\" style=\"clear: left; cursor: pointer; display: block; float: left;  text-align: center;\"><img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjD8MxnljfwiJJQk7B4g2SWBXQkxF-8IazCtzUfEIgoN-4mJ0vp6aJ9aWa1JRGP-JBM1lVAWCVxu7lpWuqdkigibSSx9f5cnEP7pWIoyoZCd9pqicpVAyhT4oP5Pq7-Vn3xW_HKbPqaoAcUYcr-spg9BjFii4a1A_0d0kNtWtEMHP5hHAyE0WhOeABTM9hT\/s1700-e365\/1.png\" alt=\"\" border=\"0\" data-original-height=\"627\" data-original-width=\"1201\"\/><\/a><\/div>\n<p>Just because an AI Agent can find a way to access an application, a system, a database, doesn&#8217;t mean that they should do so. But where coding would restrict a traditional nonhuman actor and conscience should give a human pause, in most cases, AI Agents have no such constraints or compunctions.<\/p>\n<p>That&#8217;s why <a href=\"https:\/\/eu1.hubs.ly\/H0vmZWn0\">well-managed identity and access management<\/a> is a critical foundation to keeping Agent AI activity within authorized bounds. Look no further than the cloud outages reported at the start of the year to understand this importance.<\/p>\n<p>Of course, IAM shortcuts, gaps, and exceptions have built up over the years. Even decades. So it&#8217;s not reasonable to expect everything to be cleaned up at once. That&#8217;s why the findings from this year&#8217;s Identity Gap Snapshot- the exposures most common across North American and European enterprises- are so important and timely.<\/p>\n<h3>Top 3 Findings<\/h3>\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEg-daqDNPwgxshhkiReufpu8Ibc0PuPf8jF4gD-bY1cPhQWl73EDPzzAMF_VmleXFeisLnO_WsRW8nNizmmhvgQQaXIBwvn3PsjKHCx7oc8RAChi0vtcLPdgyeUY4_5IO-5sdCEh4uQNyn0W-LyNFqmc3lOCMKHe2F6bzJ5Ez0ugpsTHSYfYQpww0TZiNHN\/s1700-e365\/2.jpg\" style=\"clear: left; display: block; float: left;  text-align: center;\"><img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEg-daqDNPwgxshhkiReufpu8Ibc0PuPf8jF4gD-bY1cPhQWl73EDPzzAMF_VmleXFeisLnO_WsRW8nNizmmhvgQQaXIBwvn3PsjKHCx7oc8RAChi0vtcLPdgyeUY4_5IO-5sdCEh4uQNyn0W-LyNFqmc3lOCMKHe2F6bzJ5Ez0ugpsTHSYfYQpww0TZiNHN\/s1700-e365\/2.jpg\" alt=\"\" border=\"0\" data-original-height=\"560\" data-original-width=\"1440\"\/><\/a><\/div>\n<ol>\n<li><b>Invisible Non-Human Accounts:\u00a0<\/b>Two out of every three nonhuman accounts are set up locally in the application itself. That makes them unseen and unmanaged by the central IAM program. Understandable for machine and service accounts. Dangerous for autonomous AI agents.<\/li>\n<li><b>Excessive Permissions:\u00a0<\/b>Seventy percent of all applications have an excessive number of privileged accounts. Far more than expected in the area of \u00ableast privilege\u00bb access and a major risk given today&#8217;s threat actors, as well as those AI agents mentioned above.<\/li>\n<li><b>Orphan Accounts:\u00a0<\/b>Forty percent of all accounts, across enterprise environments, were found to have outlived their authorized user. These \u00aborphan\u00bb accounts are clearly unmanaged and likely unseen, and are ripe for the picking by threat actors and AI agents.<\/li>\n<\/ol>\n<p>Those are just a few highlights from the full Identity Gap Snapshot. We encourage you to read the <a href=\"https:\/\/eu1.hubs.ly\/H0vnm4Z0\">full report.<\/a><\/p>\n<h3>What You Can Do<\/h3>\n<p>If you are uncertain about how to address these (and similar) issues within your organization, or even how prevalent each one might be in your environment, our security researcher team has also published an Identity Security Readiness Checklist. If your organization is preparing for (or already participating in) the Agent AI transformation, the time to act is now.<\/p>\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/eu1.hubs.ly\/H0vnm4Z0\" style=\"clear: left; cursor: pointer; display: block; float: left;  text-align: center;\"><img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEi5g4cnwOotSpmvQj16LylJE5YYECStSYvH3esC5kfEZbfQrO9dBPXHplirugyoAeEkbFWOOhAYAlN85z46uiAkltdfibceivgmOYud99EVOGUd-HwvrTUhTTReWraxC-5kEvB75W3x1giY4_9qeEjET148sZMGrQlxrGyN5H-2AFivCSx8oQcqFB-Lp9i3\/s1700-e365\/3.gif\" alt=\"\" border=\"0\" data-original-height=\"660\" data-original-width=\"1200\"\/><\/a><\/div>\n<p><noscript><br \/>\n<img loading=\"lazy\" decoding=\"async\" alt=\"\" class=\"no-lazy\" height=\"1\" src=\"https:\/\/px.ads.linkedin.com\/collect\/?pid=7024138&amp;fmt=gif\" style=\"display:none;\" width=\"1\"\/><br \/>\n<\/noscript><\/p>\n<div class=\"cf note-b\">Found this article interesting? <span class=\"\">This article is a contributed piece from one of our valued partners.<\/span> Follow us on <a href=\"https:\/\/news.google.com\/publications\/CAAqLQgKIidDQklTRndnTWFoTUtFWFJvWldoaFkydGxjbTVsZDNNdVkyOXRLQUFQAQ\" rel=\"noopener\" target=\"_blank\">Google News<\/a>, <a href=\"https:\/\/twitter.com\/thehackersnews\" rel=\"noopener\" target=\"_blank\">Twitter<\/a> and <a href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" rel=\"noopener\" target=\"_blank\">LinkedIn<\/a> to read more exclusive content we post.<\/div>\n<\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ue804The Hacker News\ue802May 20, 2026Identity Security \/ Enterprise Security New Industry Data Just Released Suggests Not. On May 19th, 2026, Orchid Security released the results of our Identity Gap: Snapshot&hellip;<\/p>\n","protected":false},"author":1,"featured_media":992,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[683,1008,1421],"class_list":["post-991","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-agent","tag-coming","tag-ready"],"_links":{"self":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/991","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=991"}],"version-history":[{"count":0,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/991\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/media\/992"}],"wp:attachment":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=991"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=991"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=991"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}