A bot sent 3 billion tokens after a Morse code prompt, a read-only finance agent posted bank balances into Slack, and US banks find unvetted AI agents in customer accounts. What is verified, what is a vendor claim, why credential brokering beats pasting passwords, and the controls companies and users need before handing an agent the next key.
AI Agents Now Hold Our Keys, and Things Are Going Wrong. How to Delegate Without Handing Over the Vault
