AI agents are inside the enterprise are your security foundations ready for them?

Date:
Fri, 14 Aug 2026 10:30:58 +0000

Description:
How AI agents are exposing the need for hardware-level security foundations.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter The recent release of Anthropic Mythos is a wake-up call for the tech industry and the fact that Anthropic themselves chose not to release it publicly speaks volumes about the level of risk we have now reached. AI agents have evolved from chatbots with upgraded capabilities to effective employees with database access, API keys, and
system privileges. Camellia Chan Social Links Navigation

CEO and Founder of X-PHY, a Flexxon brand. However, the security protecting them is built on the same strategy that failed to stop ChatGPT jailbreaks in 2023. And this time, theres no human to review an agents output, just an autonomous agent carrying out commands in a silo. AI agents are reshaping enterprise systems and the way work gets done. Securing them requires an equally fundamental shift in thinking. Ultimately, now that agents act independently, resilience must be rooted in foundational controls, including hardware-level and lower-stack security, to be ready when the higher-level safeguards fail. Latest Videos From TechRadar Watch full video here: How AI agents expand the attack surface Before agentic AI, the biggest AI risks were bad recommendations, inappropriate responses, and conversational data exposure. Human oversight acted as a safeguard for every action, and AI systems operated without direct access to sensitive information. The primary concern was reputational damage rather than risks to underlying
infrastructure .

When Anthropic released the Model Context Protocol (MCP) in November 2024, it established a standardized framework that allows AI agents to connect to databases, file systems, and enterprise tools. But within eight months, a critical vulnerability emerged (CVE-2025-49596, CVSS9.4), triggering
emergency security responses across the industry. You may like How AI agents are wrecking havoc in legacy security setups and enterprises are catching up Why self-running agents are creating the biggest security crisis of 2026 Why cybersecurity must evolve for the age of AI agents

The risk came from four factors working together. Autonomy means agents can decide and act without human review. Privileged access gives them
credentials, tokens and file system permissions. Machine-speed execution leaves little time for human intervention. And cross-system reach means one compromised agent can move across connected environments.

Together, these factors expanded the attack surface far beyond what traditional security controls even AI-enabled ones were built to manage.
Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over. Why software-only defences keep falling short The industry is moving quickly to secure AI agents, but the response largely mirrors a familiar approach: adding more layers of software . Most companies are focusing on two main layers: input guardrails implementing more software tools designed to stop malicious instructions from ever reaching AI agents, and permissions and monitoring limiting what compromised agents can access.

Its the same strategy the industry had relied on for decades: deploy quickly, remain agile, and address vulnerabilities as they emerge. Both methods
operate inside the software trust boundary.

But history shows this approach often ends the same way: with the need for hardware-layer protections. In the 1990s and 2000s, network security
responded to software exploits by deploying additional software layers. Breaches persisted until organizations eventually adopted hardware-enforced network segmentation. What to read next What the OpenClaw vulnerability reveals about the future of agentic AI security Phishing the agent: Why AI guardrails arent enough AI agents are creating a major security blind spot in financial services

The same pattern played out with endpoint security in the 2000s and 2010s. As malware evolved to bypass detection, the response was behavioral analysis, sandboxing, and endpoint detection and response. Yet more software. Breaches continued until TPM (Trust Platform Module) chips and hardware-enforced
secure boot became widely adopted. Cloud security, in the 2010s and 2020s, followed a similar path.

A common lesson runs through each of these domains: when the software trust boundary is compromised, the hardware layer where data actually lives must be secured too. The case for hardware-level security This time, we cannot afford to learn slowly. Agents are already being connected to the systems
that business rely on for their daily operations. Incidents like the MCP critical vulnerability and recent reports of a data leak caused by a Meta AI agent show how quickly the risks can become real.

Guardrails, permissions, and monitoring are necessary, but they are insufficient, and they represent the security layers that history shows will eventually be bypassed. Effective defense requires a third layer one that exists beyond the software trust boundary and provides oversight at the hardware level, where sensitive data is ultimately stored and processed.

Hardware Root of Trust serves as the final security barrier, helping contain breaches before they escalate into a full system compromise. As the number of companies using AI agents continues to grow, security needs to move deeper than the application layer.

The industry has already learned that software alone cannot secure complex systems it should not wait for a major compromise to learn the same lesson again. We've featured the best endpoint protection software. This article was produced as part of TechRadar Pro Perspectives , our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit



======================================================================
Link to news story: https://www.techradar.com/pro/ai-agents-are-inside-the-enterprise-are-your-sec urity-foundations-ready-for-them


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)