Executive Summary
A Gartner summit talk argues attackers bypass AI security programs by using legacy infrastructure to hijack AI agents, as about 71% of organizations pilot agents.
What Happened
Earlier this month, I spoke at the Gartner Security & Risk Management Summit about a blind spot most security programs are still not accounting for - how attackers are circumventing AI security programs by using legacy infrastructure to hijack AI agents. AI adoption is moving faster than security programs can account for. Roughly 71% of organizations are piloting AI agents across their
Vulnerability / Attack Technique
Hijacking agents through legacy infrastructure
Technical Mechanism
Agents depend on older systems and credentials that attackers already know how to compromise.
AI Security Category
LLM06:2025 Excessive Agency
Part of the AI Agent Excessive Agency topic.
Relevant Frameworks
RealGround Analysis
Agents inherit the weaknesses of the systems they connect to. RealGround analysis: secure the infrastructure around agents, not only the agents.
Recommended Controls
- Review legacy systems and credentials agents depend on
Related RealGround Service
Secure AI Agent Build · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/06/stop-your-legacy-infrastructure-from.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.