An AI agent attempts to access a sensitive system outside its assigned role. Its credentials are valid, and it belongs to the organization. Is it trying to complete a legitimate task, following an instruction an attacker planted or running under credentials an attacker now controls?
Forbes ·