Four in five AI tools lack IT oversight, Reco finds
Four in five AI tools lack IT oversight, Reco finds
摘要: Data Protection
Digital Transformation
Four in five AI tools lack IT oversight, Reco finds
Thu, 27th Aug 2026 (Today)
JOSEPH GABRIEL LAGONSIN
正文
Data Protection
Digital Transformation
Four in five AI tools lack IT oversight, Reco finds
Thu, 27th Aug 2026 (Today)
JOSEPH GABRIEL LAGONSIN
News Editor
Reco has released its
State of Agent Security 2026
report, which says four in five AI tools in enterprise environments operate without IT oversight.
The findings are based on anonymised telemetry from 62 large enterprises, an analysis of 500 published Model Context Protocol servers, and a review of disclosed vulnerabilities tied to agent and large language model tooling.
The report highlights a gap between the spread of AI agents in day-to-day work and the controls many companies apply to them. It found that only 20% of AI tools observed in enterprise ecosystems had IT or security approval, leaving teams without a clear record of which tools were active, who owned them, or what permissions they held.
This matters because AI agents increasingly sit inside mainstream workplace software rather than existing as separate applications. In that setting, they can inherit user permissions, OAuth grants, service accounts, and API access, allowing them to act through systems that already have standing approval.
Permission risks
Reco's analysis of 500 published Model Context Protocol servers found that 62% combined local file-read access with outbound network connectivity. That pairing creates a direct route for data exfiltration because the same tool may be able to read local data and send it outside the organisation.
The report also found that half of the sampled agent tools could execute shell commands, more than eight in ten could read or write local files, and roughly three-quarters could make outbound network calls. Those functions may be legitimate in isolation, but become more concerning when organisations do not know which tools are in use or how permissions overlap.
The report argues that risk does not always come from a single rogue tool. It can arise when several authorised or semi-visible tools