Cybersecurity Experts Warn of Growing Shadow AI Threat

Cybersecurity experts are warning of growing concerns about shadow AI, the use of AI tools without an organisation’s approval or oversight. According to a Gartner survey, 69% of cybersecurity leaders suspected or had evidence that employees were using unsanctioned AI agents and tools. A Cloud Security Alliance survey found that 82% of respondents had discovered shadow AI agents in their environments in the previous year.

Sophos has announced the general availability of technology designed to identify AI tools used by employees and applications, including those that security teams have not approved. The company has seen increased interest from clients in shadow AI, with customers asking how they can understand what AI is already being used across their environments and put practical controls around that usage.

IDC projects that there will be 1.3 billion AI agents by 2028, highlighting the growing need for AI security measures. Cybersecurity experts warn that every AI tool an organisation cannot see is a potential gap in confidentiality, integrity and availability.