What the source reports
In environments studied for the 2026 State of Agent Security Report, roughly 1,280 third-party products now embed AI. About 282 of them sit behind single sign-on. The other thousand are invisible to identity infrastructure by default, not because anyone hid them, but because an identity stack can only govern what authenticates through it, and most agents never do. That gap is the clearest
This dispatch is based on reporting from The Hacker News. The original publication should be read for the complete context, named sources, dates, and qualifications.
Why it matters
The development is relevant to the way technology is built, secured, governed, or used. Readers should distinguish the reported facts from any interpretation added during editorial review.
The original source remains the authority for the underlying report.
OnBytr’s role is to provide a concise, source-linked explanation and identify the practical question worth watching next. This post is an editorial summary, not a substitute for the original reporting.