Skip to main content

Expert Insights for the AI Business Revolution

Add as a preferred source on Google

News

Shadow AI Is Becoming a Security Blind Spot for Enterprises, Sophos Warns

  • By Sean Parker
  • 10/16/2026

Key Takeaways

  • Cybersecurity firm Sophos says unauthorized AI tools and agents are creating security visibility challenges for organizations.
  • Research cited by Sophos found that 69% of organizations suspect or have evidence of unauthorized AI use, while 82% reported discovering shadow AI agents.
  • Sophos has launched AI Defense to identify AI activity, enforce security policies, and help prevent sensitive data exposure.

Cybersecurity company Sophos has warned that unauthorized artificial intelligence tools and agents are creating security risks for businesses as AI adoption increases.

In an October 13 announcement, the company highlighted the growing use of shadow AI, referring to AI tools and agents operating without formal organizational approval or oversight. The security firm cited research indicating that 69% of organizations suspect or have evidence of unauthorized AI use.

Separate research from Gartner and Cloud Security Alliance found that 82% of organizations discovered shadow AI agents in their environments during the previous year.

Unauthorized AI Creates Security Visibility Gaps
According to the security firm, organizations struggled to identify which AI tools employees use, what information those tools access, and whether their use complies with security policies.

"Organizations are adopting AI faster than they can secure it, and most security teams can't answer three basic questions: which AI tools are running, what data is going into them, and whether that activity lines up with policy," said Kyle Falkenhagen, senior vice president of product management at Sophos.

The company also cited an IDC projection that the number of AI agents could reach 1.3 billion by 2028.

Sophos researchers reported observing attackers use AI agents within a customer's network to build and test nearly 80 malware modules.

Sophos Launches AI Defense
The cybersecurity firm announced the general availability of Sophos AI Defense, a security offering designed to identify AI tools, monitor their activity, and enforce organizational security policies.

The product operates through Sophos Fusion, the company's cybersecurity platform, and uses information from devices, networks, identity systems, and browsers.

According to the company, AI Defense can inspect prompts, uploads, and other AI interactions to identify potentially risky activity and help prevent sensitive data exposure.

Featured

Most   Popular