The agent security gap: 54% of enterprises have already had an AI agent incident, and most still let agents share credentials

Across 107 enterprises, AI agents are being given real access to systems and data while the controls meant to contain them lag behind. More than half have already had a confirmed agent security incident or a near-miss; only about a third give every agent its own scoped identity, and most agents still share credentials; and only three in ten isolate their highest-risk agents. The security stack is

Across 101 enterprises, the infrastructure that feeds AI agents their business context is being built faster than it can be trusted. Retrieval-augmented generation is already the default context source, and provider-native retrieval has quietly overtaken the dedicated vector databases that define the category — yet a majority of enterprises have already watched their agents produce confident, wron

How many of your org's "agents" can actually complete a multi-step task without someone feeding it each step by hand? VentureBeat's Pulse Research asked that question directly after surveying 101 enterprises about their AI agent deployment. The answer was blunt: 71% admitted a quarter or fewer of what they called agents were real multi-step workflows, not single-prompt wrappers with new packaging.