Arrakis says 76% of AI agents are dormant but still credentialed
Original title: Arrakis Security Report Finds 76% of AI Agents Are Dormant but Keep Their Credentials and Connections
Telemetry from Arrakis customers over 12 weeks also finds 44% idle for 180 days.
The same Arrakis Security report, republished by Cyber Security News, says most agents that have not run recently still hold working credentials and live triggers. Data cover anonymized telemetry from thousands of agents over 12 weeks. Findings include third-party model use, cross-agent task passing and broad access to cloud storage and other sensitive systems with almost no verified DLP.
Unconfirmed: Figures are claimed by Arrakis from its own customer environments only.
- 24% of dormant agents can be started by an unsigned external webhook.
- 22% can send content to a third-party model and act on the answer.
- 20% can obtain results they are not allowed to produce themselves.
- 82% have at least one exposure; 46% of those have more than one.
- The report is posted at arrakis.security/2026-threat-report.
Impact: Dormant agents retain working credentials and external triggers
- 1.Review dormant agents whose credentials and triggers still work.
- 2.Check agents reachable by unsigned webhooks from outside the organization.
From the original article
1 min read at cybersecuritynews.com
New York, NY, USA, October 21st, 2026, CyberNewswire According to the 2026 Autonomous Agents Threat Report, published by Arrakis Security, 76% of active agents have not run in 60 days, but their credentials still work and their triggers still fire. 44% have not run in 180 days. 24% of dormant agents can be started by […]
By Cybernewswire · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.