I'd argue that very few companies have any real appreciation for how many of their employees are already feeding API keys and other stuff into fairly new and questionable agentic AI tools or platforms. So many companies are like, oh we're taking a wait-and-see approach to adopting AI. Meanwhile, half their dev team is doing critical development work on shared servers that have no authentication or limited (no 2fa) auth.

@briankrebs I'm… skeptical, but not enough to argue. my experience of companies' relationship to AI is that there are aggressive mandates to use this tech and relatively tepid interest from workers. not zero, but not the widespread DIY enthusiasm that shadow IT derived from. I don't have any real data to back this up though, so I would be very curious if you do some reporting on this.