AI agents exploit existing API connections between apps without needing new authentication, leaving customer data exposed. Recent breaches at Salesloft, Vercel, and Clue show how attackers target the connections between applications rather than user logins, making traditional security measures like two-factor authentication useless against this new threat.
The scary part is now you put AI in the equation. So the same API connection between 2 applications is being used by agents as well, who've never had to be authenticated to enter in the first place. Now they're over-provisioned, has access to more data than you actually need, and are performing at a hyperscale and exposed to so much more, and has high exposure to a bad actor coming in and hacking through the surface. So this is the problem we solve, whether it's your SaaS supply chain issue or your agentic, it's actually all part of the same equation. And authentication, or just because you have 2-factor authentication or an SSO, that's not gonna mean anything because hackers are no longer going to an identity and trying to hack that. They're actually in between the application. That's where the most vulnerable sweet spot is for them. And a very recent example has been like the Salesloft Salesforce attack or the Vercel attack that happened. There was another one that happened, which was Clue, which I believe is a go-to-market tool that got hacked. So these all exposed customer data that lives inside your CRM.
Trust and Leadership Lessons for FP&A From 100+ Top Leaders with CFO Jon Laudie
