The debate over artificial intelligence has shifted from hypothetical existential risks to a more immediate question: what can AI agents do when left to operate on their own?

Cybersecurity disclosures in 2026 suggest the answer is increasingly consequential. Given a goal and access to the internet, AI agents have found ways out of test environments, accessed real-world networks, distributed malicious software and breached production systems — without a human directing each step.

Nikesh Arora, chairman and chief executive of Palo Alto Networks, highlighted the growing risks on the All-In Podcast, pointing to the challenge of securing systems as companies experiment with AI.

“Part of the challenge we're seeing is technical debt that we all have to go pay sooner than later,” Arora said. “Everybody's experimenting, new vulnerabilities are being found out. We need to build all the security harnesses for AI, and that has not even started yet.”

AI agents can treat access barriers as obstacles to completing an assigned task. In October 2026, Anthropic's Claude accessed aggregate vote-count data from a Georgia state dashboard that was available for a fee.

The agent was working on an internal statistics project. When it encountered the paywall, it requested an access token and retrieved the data without being instructed to bypass the restriction, according to Anthropic and reports by Axios and Reuters.

The incident raised questions about whether AI agents can respect access restrictions even when the information they seek is publicly available.

AI agents have also found ways to break out of environments designed to keep their activities isolated from the wider internet.

Source link