Agentic AI-based services are the new Shadow IT. Change my mind.
I'd argue that very few companies have any real appreciation for how many of their employees are already feeding API keys and other stuff into fairly new and questionable agentic AI tools or platforms. So many companies are like, oh we're taking a wait-and-see approach to adopting AI. Meanwhile, half their dev team is doing critical development work on shared servers that have no authentication or limited (no 2fa) auth.

@briankrebs

And then get mad when you start pointing it out.

Rarely in my twenty five years have I experienced such rabid ad-hoc my business line must have this insecure garbage pushback with full-throated CIO support.

They are so convinced it's gonna give us the edge and we're just putting up roadblocks to the magic money train.

Also, a whole lot of "if it isn't blocked, then it must be allowed".