Arrakis says 76% of AI agents are dormant but still credentialed
Original title: Arrakis Security Report Finds 76% of AI Agents Are Dormant but Keep Their Credentials and Connections
In Arrakis customer telemetry, 24% of dormant agents can be started by an unsigned external webhook.
Arrakis Security's 2026 Autonomous Agents Threat Report says 76% of agents it calls active have not run in 60 days, yet credentials and triggers remain. The figures come from anonymized production telemetry on thousands of agents in Arrakis customers' environments over 12 weeks. The company says many agents can reach sensitive systems with little verified data-loss prevention and can hand tasks to other agents.
Unconfirmed: Percentages are Arrakis's own customer telemetry, not an independent sample.
- 44% of those agents have not run in 180 days.
- 22% can send content to a third-party model and act on the reply.
- 20% can pass a task to another agent with different permissions.
- 70% can reach sensitive systems, and almost none have verified DLP.
- 82% carry at least one exposure; 46% of those carry more than one.
Impact: Dormant agents retain working credentials and external triggers
- 1.Review dormant agents whose credentials and triggers still work.
- 2.Check agents that accept unsigned webhooks from outside the organization.
From the original article
1 min read at gbhackers.com
New York, NY, USA, October 21st, 2026, CyberNewswire According to the 2026 Autonomous Agents Threat Report, published by Arrakis Security, 76% of active agents have not run in 60 days, but their credentials still work and their triggers still fire. 44% have not run in 180 days. 24% of dormant agents can be started by […]
By CyberNewswire · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.