Immuta CISO predicts critical AI incidents at major enterprises within 18 months

Immuta CISO Michael Scott said at least two major enterprises outside the AI sector will suffer a critical AI-related security or privacy incident within 18 months. He argues AI agents should be treated as lower-trust identities that do not inherit all of their user's permissions.

• Scott predicts at least two critical AI incidents within 18 months
• Agents should not inherit all user permissions, Immuta CISO says
• Sub-agent permissions should be limited to the current task
• Authentication alone does not secure what an agent does