[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxC-PJCGQaqQQGVWu5PSsbn2nPYullplBnwg4RNJqO7E":3},{"article":4,"iocs":39,"watch_terms":40,"solutions":41,"lesson":69},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"7b386739-fcf6-4f69-bcef-55291be896d0","Social Engineering AI Agents: The New BEC for 2026","social-engineering-ai-agents-the-new-bec-for-2026-a85203","As AI agents gain authority over business systems, attackers can manipulate them like business email compromise (BEC) victims.","The article discusses a new threat vector where attackers could manipulate AI agents that have been granted authority over business systems. This is being likened to Business Email Compromise (BEC) attacks, where human victims are tricked into performing actions. As AI agents become more integrated and powerful, they may present a novel attack surface for social engineering.","AI agents can be manipulated by attackers in a new form of business email compromise.","https:\u002F\u002Fwww.darkreading.com\u002Fcybersecurity-operations\u002Fsocial-engineering-ai-agents-bec-2026","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt509529652bae6ba5\u002F6ac7de6c3ada349d7f093787\u002FDigital_face-imaginima-GettyImages-2228383398.jpg?width=720&quality=80&disable=upscale","2026-10-09T13:00:00+00:00","2026-10-09T14:00:15.645801+00:00",7,[17,20],{"name":18,"type":19},"AI agents","technology",{"name":21,"type":22},"Business Email Compromise","campaign","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":23,"icon":25,"name":26,"slug":27},null,"Threat Intelligence","threat-intelligence",[29,34],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",[],[],{"controls":42,"vendors":68},[43],{"slug":38,"name":44,"problem":45,"products":46},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[47,55,63],{"vendor_slug":48,"vendor_name":49,"vendor_logo":50,"product_slug":51,"product_name":52,"url":53,"description":54},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":64,"product_name":65,"url":66,"description":67},"boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",[],{"slug":70,"title":71,"body":72,"framework_refs":73,"framework_notes":85},"ai-agents-are-the-new-bec-target-social-engineering-evolves","AI Agents Are the New BEC Target: Social Engineering Evolves","As organizations delegate authority over critical business systems to AI agents, attackers are developing techniques to manipulate these agents just as they once manipulated human employees in Business Email Compromise schemes. The root cause lies in a lack of security awareness around AI agent behavior, combined with overly permissive access controls granted to these systems without adequate safeguards. Unlike humans, AI agents may lack contextual skepticism and can be programmed or prompted into executing malicious instructions at machine speed and scale. This matters enormously because a single compromised AI agent with broad system access could cause financial, reputational, or operational damage far exceeding a traditional BEC incident. Organizations must treat AI agents as privileged identities requiring the same — if not stricter — scrutiny as human users.",[74,75,76,77,78,79,80,81,82,83,84],"CIS Control 5: Account Management (Least Privilege for AI Identities)","CIS Control 6: Access Control Management","CIS Control 8: Audit Log Management","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 AU-2: Event Logging","NIST SP 800-53 SI-10: Information Input Validation","NIST AI RMF: GOVERN 1.1 – Accountability for AI Systems","NIST AI RMF: MEASURE 2.5 – AI Risk Monitoring","MITRE ATLAS: AML.T0051 – LLM Prompt Injection","ISO\u002FIEC 42001: AI Management System Controls","GDPR Article 22: Automated Decision-Making Safeguards",{}]