[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhSUKcp1G2MxOrDer1yvSTF0zteAiiWbybt52-RXObac":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":134},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"b6ccaf3a-9b13-4a7e-869b-2281e8947eea","Cyberhaven launches Agentic Data Security to track and control AI data use","cyberhaven-launches-agentic-data-security-to-track-and-control-ai-data-use-c5660b","Cyberhaven has introduced Agentic Data Security (ADS), to help CISOs, data security teams, insider risk teams, and AI governance leaders say yes to AI agents without losing control of their data. Agentic Data Security shows security teams what every AI agent does with company data, who it is acting for, where the data goes next, and stops sensitive data before it leaves. The companies leaning furthest into the agentic future, from frontier AI labs to … More → The post Cyberhaven launches Agentic Data Security to track and control AI data use appeared first on Help Net Security.","Cyberhaven has released Agentic Data Security (ADS), a new module designed to provide CISOs and data security teams with visibility and control over how AI agents interact with company data. The tool aims to address the growing insider risk associated with AI agents by tracking their actions, identifying who initiated them, and preventing sensitive data exfiltration, thereby enabling organizations to adopt AI agents more confidently.","Cyberhaven launches Agentic Data Security to track and control AI agent data usage.","https:\u002F\u002Fwww.helpnetsecurity.com\u002F2026\u002F11\u002F05\u002Fcyberhaven-agentic-data-security\u002F","https:\u002F\u002Fimg.helpnetsecurity.com\u002Fwp-content\u002Fuploads\u002F2024\u002F11\u002F28150559\u002Fhns-large_logo.webp","2026-11-05T15:04:07+00:00","2026-11-05T16:00:21.433096+00:00",7,[17,20,23,26],{"name":18,"type":19},"Agentic Data Security","product",{"name":21,"type":22},"Cyberhaven","vendor",{"name":24,"type":25},"AI agents","technology",{"name":27,"type":19},"Cyberhaven Flow","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":28,"icon":30,"name":31,"slug":32},null,"AI Security","ai-security",[34,39,44],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":40},{"id":41,"icon":30,"name":42,"slug":43},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":45},{"id":28,"icon":30,"name":31,"slug":32},[],[21,18,27],{"controls":49,"vendors":133},[50,79,105],{"slug":51,"name":52,"problem":53,"products":54},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[55,63,71],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"slug":80,"name":81,"problem":82,"products":83},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[84,92,100],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":101,"product_name":102,"url":103,"description":104},"purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"slug":32,"name":106,"problem":107,"products":108},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[109,117,125],{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",[],{"slug":135,"title":136,"body":137,"framework_refs":138,"framework_notes":146},"ai-agents-create-new-data-exfiltration-risks-without-proper-oversight","AI Agents Create New Data Exfiltration Risks Without Proper Oversight","As AI agents are granted access to sensitive company data to perform automated tasks, organizations face a critical blind spot: traditional data security tools were not designed to track non-human actors. Without visibility into what data AI agents are accessing, who authorized those actions, and where data is being sent, insider risk expands dramatically. This matters because a single misconfigured or compromised AI agent can exfiltrate large volumes of sensitive data at machine speed, far outpacing human-driven threats. The launch of tools like Cyberhaven's ADS signals that the industry is recognizing AI agents as a new and distinct threat surface requiring dedicated controls.",[139,140,141,142,143,144,145],"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","CIS Control 3: Data Protection","NIST SP 800-53 SI-2: Flaw Remediation","CIS Control 8: Audit Log Management","GDPR Article 32","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","NIS2 Article 21(2)(b)",{"GDPR Article 32":147,"NIS2 Article 21(2)(b)":148,"CIS Control 3: Data Protection":149,"CIS Control 8: Audit Log Management":150,"NIST SP 800-53 SI-2: Flaw Remediation":151,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":152,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":153},"AI agents processing personal data must be subject to appropriate technical measures to ensure confidentiality and prevent unauthorized disclosure, which requires the kind of visibility and control Cyberhaven's ADS addresses.","NIS2 requires incident handling and risk management controls for all systems that could impact essential services, including AI-driven automation that accesses sensitive operational data.","This control mandates identifying, classifying, and controlling access to sensitive data — foundational steps to ensuring AI agents cannot exfiltrate data beyond their authorized scope.","Without comprehensive logging of AI agent actions, security teams cannot detect, investigate, or respond to unauthorized data access — making audit logging a prerequisite for AI agent security.","Gaps in AI agent oversight represent an architectural flaw in security design; organizations must identify and remediate these gaps before AI agents are broadly deployed.","Deploying AI agents without defined security controls for data access constitutes an unmanaged technical vulnerability that must be identified and treated under a formal vulnerability management process.","AI agents must be treated as distinct identities with scoped credentials and access controls, exactly what this framework item requires to prevent unauthorized or over-privileged data access by non-human actors."]