[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7JYTYFqwcXTqeCgseemv5_f1Pl70CrLQPaO59sNe8hQ":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":136},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"a619e588-c0a7-4192-9f49-ce48c18a36bf","How one AI agent exposed five critical enterprise security gaps","how-one-ai-agent-exposed-five-critical-enterprise-security-gaps-b32ccd","An AI agent built to automate invoice processing could be manipulated into changing vendor bank details through a malicious email, without triggering traditional security alerts. Token Security examines five critical AI agent security gaps and shares practical guidance from industry security leaders on preventing them. [...]","An AI agent designed for invoice processing was built without security oversight and could be manipulated via a malicious email to alter vendor bank details. This highlights five critical security gaps in AI agent deployment, including unauthorized access and lack of review, as detailed by Token Security.","AI agent processing invoices exposed five critical enterprise security gaps.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fhow-one-ai-agent-exposed-five-critical-enterprise-security-gaps\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fposts\u002F2026\u002F11\u002F12\u002Fagentic-universe.jpg","2026-11-13T15:01:11+00:00","2026-11-13T16:00:19.335255+00:00",7,[17,20,23,26],{"name":18,"type":19},"Token Security","vendor",{"name":21,"type":22},"AI agent","technology",{"name":24,"type":25},"ERP","product",{"name":27,"type":25},"Slack","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":28,"icon":30,"name":31,"slug":32},null,"AI Security","ai-security",[34,39,41],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":40},{"id":28,"icon":30,"name":31,"slug":32},{"category":42},{"id":43,"icon":30,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,24,27],{"controls":49,"vendors":135},[50,79,107],{"slug":51,"name":52,"problem":53,"products":54},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[55,63,71],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"omada","Omada","\u002Fvendor-logos\u002Fomada.png","omada-identity-cloud","Omada Identity Cloud","https:\u002F\u002Fomadaidentity.com\u002Fproducts\u002Fomada-identity-cloud\u002F","Identity governance and administration delivered as a service.",{"slug":80,"name":81,"problem":82,"products":83},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[84,92,100],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":102,"url":105,"description":106},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"slug":32,"name":108,"problem":109,"products":110},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[111,119,127],{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":131,"product_name":132,"url":133,"description":134},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",[],{"slug":137,"title":138,"body":139,"framework_refs":140,"framework_notes":146},"unsecured-ai-agent-exposes-enterprise-to-invoice-fraud-via-email-manipulation","Unsecured AI Agent Exposes Enterprise to Invoice Fraud via Email Manipulation","An AI agent deployed for invoice processing was built and operated without security oversight, allowing an attacker to manipulate it through a malicious email to alter vendor bank account details — a classic business email compromise amplified by AI. The root problem was that the agent was granted excessive permissions with no review process, no input validation, and no human-in-the-loop controls for high-risk actions like changing financial data. This matters because AI agents operate autonomously at machine speed, meaning a single unguarded action can cause significant financial or data harm before any human notices. As enterprises rush to deploy AI agents, the same security disciplines applied to software and privileged accounts must be applied rigorously to these systems from day one.",[141,142,143,144,145],"CIS Control 6: Access Control Management (v8)","NIST SP 800-53 AC-6: Least Privilege","NIST CSF 2.0 GV.OC-01: Organizational Context","OWASP A05:2021 Security Misconfiguration","NIS2 Article 21(2)(i)",{"NIS2 Article 21(2)(i)":147,"NIST SP 800-53 AC-6: Least Privilege":148,"OWASP A05:2021 Security Misconfiguration":149,"CIS Control 6: Access Control Management (v8)":150,"NIST CSF 2.0 GV.OC-01: Organizational Context":151},"This point requires organisations to implement access control and asset management policies, which were absent for the AI agent — it held unreviewed access to sensitive financial systems with no identity governance applied.","AC-6 requires that systems and processes operate with only the permissions necessary for their function; the agent was not constrained in this way, enabling it to alter vendor banking details outside any approved scope.","Deploying the AI agent without input validation, permission scoping, or security controls is a misconfiguration that left it open to manipulation via adversarial input in a malicious email.","This control requires that access rights be granted based on least privilege and reviewed regularly — the AI agent had unchecked, overly broad access to financial data with no such review in place.","This category calls for security requirements to be integrated into how the organization deploys technology; the AI agent was built and deployed without any security oversight or governance process."]