
What happened
Palo Alto Networks published guidance on securing AI coding agents, noting enterprise spend on these tools is projected to top $13 billion this year, compounding over 60% annually.
Why it matters
Traditional cybersecurity assumed known software, human users and human-speed actions; agents now change files and run commands themselves. In one documented intrusion, an agent executed 17,600 actions in 4.5 days.
What to watch
The test is whether enterprises can discover shadow AI and scope agent identities before agents act. The body cites 93% of enterprises exceeding AI budgets, with 20-30% of spend unaccounted for.
WHO IT HITSEnterprise security and IT teams responsible for governing developer tooling and AI spend are most directly affected, as the body describes agents operating with human credentials and connections outside the company that are difficult to attribute or control.
Ask the AI about this article →
Summaries like this, in your inbox every morning.
Palo Alto Networks is framing AI coding agents not as productivity add-ons but as a new class of actor inside the enterprise. The company points to a surge in AI coding adoption, with spend on these tools projected to top $13 billion this calendar year and compound at more than 60% annually, and says the benefits for engineering teams are clear: faster output, higher productivity and lower operational overhead.
The problem, in its telling, is that these agents can assume a user's identity, modify file systems, run terminal commands and connect into core business systems. That breaks three assumptions traditional security was built on — known software, human users and human-speed actions. The body lists four resulting risk areas: shadow AI spreading before security teams know it exists; agents taking risky actions at machine speed; blurred identity because machines outnumber human identities 109 to 14 and agents often use human credentials; and uncontrolled connections that raise both cost and IP-leak risk. The cited numbers reinforce the point: 68% of organizations reported lacking visibility into developer AI tools in 2026, 57% of employees used such tools without formal IT approval, one documented intrusion chain involved an agent executing 17,600 actions in 4.5 days, and 93% of enterprises exceeded AI budgets with 20-30% of AI spend unaccounted for.
Palo Alto Networks' answer is a platform-centric approach: discover shadow AI, assess supply chain risk, protect identity and prompts, and govern data, actions and cost. The stakes hinge on whether enterprises can put that visibility and scoped identity in place before agents perform harmful actions — a race that, on the body's own evidence, many organizations are currently losing.
For example, today's edition would include:
AI-summarized, only the topics you pick — one digest a day via Email, Slack, or Discord.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. Q&As are published on this page for other readers too.
A Korean office worker wrote on the community "リメンバー" that he asked ChatGPT about chest tightness and breathin…

SCREEN and Lasertec both fell to lower revenue and profit in their latest fiscal years, but now forecast reven…

Fortinet acquired Virtue AI, a move aimed at extending its AI security and strengthening real-time protection…

Lowe's Senior Director of AI Sravan Vadigepalli sat down to explain how the retailer is building in AI, aligni…

Advocates writing for The Progressive called for a halt on new data centers and computing capacity for frontie…

Salesforce has recently been in talks to buy Listen Labs, an AI customer research platform, for around $2 bill…
