Arrakis Security Report Finds 76% of AI Agents Are Dormant but Keep Their Credentials and Connections

https://hackread.com/wp-content/uploads/2026/10/Arrakis_cover_flat_1200x720_1792596211ebZpCyz315.jpg

New York, NY, USA, October 21st, 2026, CyberNewswire

According to the 2026 Autonomous Agents Threat Report, published by Arrakis Security, 76% of active agents have not run in 60 days, but their credentials still work and their triggers still fire. 44% have not run in 180 days. 24% of dormant agents can be started by an unsigned webhook from outside the organization.

CompareSecurity

The report is based on anonymized, unidentifiable production telemetry from thousands of AI agents in Arrakis customers’ environments, collected over a 12-week period.

“There’s a lot of discussion about AI agent risk, and very little data”, said Tal Baron, CEO and co-founder of Arrakis Security. “When an employee leaves, their access is removed the same day. When an agent stops being used, nobody removes anything, because in most companies nobody owns it”.

Other findings:

Discover more

Study Security

Read Tech News

Audit Security

  • 22% of...

Copyright of this story solely belongs to hackread.com. To see the full text click HERE