AI agents are still logging in as humans

Help Net Security

July 21, 2026 at 4:30 AM

Overview

Recent analysis shows that many large organizations are using multiple AI platforms simultaneously, which raises potential security concerns. Developers and marketing teams often mix sanctioned tools with personal accounts, leading to a complex environment where AI agents may log in as human users. This situation increases the risk of unauthorized access and data breaches, as the boundaries between professional and personal use of AI tools blur. The data, gathered from over 20,000 organizations, indicates that this trend has been growing since June 2022. Companies need to be aware of these risks and implement stricter security measures to protect sensitive information.

Key Takeaways

Affected Systems: AI platforms, enterprise search tools
Action Required: Implement stricter access controls and monitoring for AI tools used within the organization.
Timeline: Ongoing since June 2022

Original Article Summary

Most large companies run more than one AI platform at the same time. Developers pull up coding assistants, marketing teams lean on writing tools, and analysts query enterprise search across separate vendors. Single-provider setups keep giving way to mixed stacks as companies keep their options open. Sanctioned tools and personal accounts sit side by side inside many organizations. Anonymized sign-on data from more than 20,000 organizations on the Okta tracked this spread from June 2022 … More → The post AI agents are still logging in as humans appeared first on Help Net Security.

Impact

AI platforms, enterprise search tools

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Ongoing since June 2022

Remediation

Implement stricter access controls and monitoring for AI tools used within the organization.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Data Breach, Okta.

Read Original Article

Related Coverage

FBI Warns of Deepfake Videos Impersonating IC3 Leadership

Infosecurity Magazine

The FBI has issued a warning about deepfake videos that impersonate leaders from the Internet Crime Complaint Center (IC3). These videos are misleading users into visiting fake complaint sites, where they may unknowingly provide personal information or report fraudulent activities. This tactic is particularly concerning as it uses the authority of recognized figures to lend credibility to the scam. The deepfake technology can make these videos appear highly convincing, making it difficult for individuals to discern the truth. As a result, users should be cautious and verify any communications they receive that claim to be from IC3 or similar agencies.

Jul 21, 2026

N-day is Becoming N-Hour. Patching Faster Won't Save You.

The Hacker News

The article discusses the challenges of patching software vulnerabilities in a timely manner. When vendors release a security patch, they reveal information about what was fixed, which can be exploited by attackers against systems that haven't been updated yet. This practice, known as N-day exploitation, creates a race between the vendors issuing patches and defenders trying to apply these updates before they are targeted. The piece emphasizes that simply patching faster may not be enough to protect systems, as the window of opportunity for attackers can be dangerously short. This issue affects all companies relying on software, particularly those with critical infrastructure that may be slow to implement updates.

Jul 21, 2026

MIT to Become Hotbed of AI Video Surveillance

Schneier on Security

MIT is investing over $3 million to install more than 500 AI surveillance cameras across its campus, including academic buildings and outdoor areas. This project, which began in November 2025 and is expected to finish by September 2026, will enhance the university's ability to monitor activities through advanced features like real-time facial recognition, object classification, and motion detection. The cameras can identify individuals based on clothing color, gender, and age from up to 35 feet away. Data collected from the cameras will be stored for up to 30 days, unless specific exceptions are made. The implications of this extensive surveillance initiative raise concerns about privacy and data security on campus, as it affects students, faculty, and visitors who may be monitored without their explicit consent.

Jul 21, 2026

US seizes over 1,000 websites in FIFA World Cup piracy crackdown

BleepingComputer

The U.S. Justice Department has taken significant action against unauthorized streaming of FIFA World Cup 2026 matches by seizing over 1,000 websites and blocking nearly 2,000 domains linked to piracy. This crackdown aims to protect the rights of broadcasters and uphold copyright laws, especially as the World Cup draws near. The seized sites were used to stream matches without permission, which undermines legitimate services and can lead to financial losses for content creators. This operation illustrates the ongoing battle against online piracy and the measures authorities are willing to take to enforce copyright protections. As major sporting events attract large audiences, illegal streaming becomes a greater concern for stakeholders in the sports and entertainment industries.

Jul 21, 2026

Meta Paid $78,000 Bounty for Vulnerability Exposing Customer Support Data

SecurityWeek

A security researcher uncovered a broken access control vulnerability in Meta's support infrastructure, which could have potentially exposed customer support data. The flaw was serious enough that Meta awarded the researcher a bounty of $78,000 for their findings. This incident raises concerns about the security of user data handled by Meta, particularly as it relates to customer support interactions. While the exact impact on users remains unclear, the discovery serves as a reminder of the importance of robust security measures in protecting sensitive information. Companies like Meta need to continuously monitor and improve their security practices to safeguard user data from similar vulnerabilities.

Jul 21, 2026

Critical Palo Alto VPN bug now exploited by Qilin ransomware gang

BleepingComputer

The Qilin ransomware group is taking advantage of a serious flaw in PAN-OS GlobalProtect, which allows attackers to bypass authentication and access victims' networks. This vulnerability has raised alarms among cybersecurity experts, particularly Arctic Wolf, who reported on the ongoing exploitation. Organizations using Palo Alto Networks' GlobalProtect VPN are at risk, as the attackers can infiltrate systems without proper credentials. This situation emphasizes the urgency for affected companies to address the vulnerability and safeguard their networks to prevent ransomware attacks, which can result in data loss and significant downtime. Users are advised to stay vigilant and apply any available security updates promptly.

Jul 21, 2026