Home/ Incident database/stat-darktrace-csa-2026
Reputational damage Prompt injection verified aggregate statistic

Darktrace/CSA: 92% of security pros concerned about AI agent impact

Darktrace / Cloud Security Alliance · Jan 1, 2026 · General agent

What happened

The Darktrace / Cloud Security Alliance 'State of AI Cybersecurity 2026' report found 92% of security professionals are concerned about the impact of AI agents, reflecting industry-wide anxiety about autonomous agent risk ahead of mature controls.

Loss / impact
Jan 1
2026
Prompt
Failure mode
General
Agent type

Causal vector

Survey of security-professional sentiment on agent risk

Source

Reported by Darktrace. Verified against the primary report.

Read the original report ↗

How a spend firewall would have helped

Concern without a control is just anxiety. A deterministic, audited policy gate is the concrete answer security teams can point to.

The six rule types that contain this class of failure

Per-transaction cap

Any single spend above your ceiling is BLOCKED before it moves.

Daily total

Cumulative spend across all agent calls, bounded per day.

Velocity limit

Stops runaway retry loops — the #1 cause of overnight losses.

Merchant allowlist

Only approved destinations can ever receive funds.

Category rules

Flag high-risk classes (crypto, infra, refunds) for review.

Approval threshold

Above a value, the action waits for a human.

Related incidents

Don't be the next entry

Every incident in this database is the result of trusting a prompt, a provider cap, or a human review cycle. sipi.bot replaces all three with one deterministic call. 27 documented failures, one control.