54% of enterprises have had an AI agent security incident, yet most still let agents share credentials

54%企业已遭遇AI智能体安全事件，多数仍共享凭证

A VentureBeat survey of 107 enterprises finds a wide agent security gap: 54% have had a confirmed incident or near-miss, yet only 32% give each agent its own scoped identity. Most agents share API keys or human credentials. The security stack is dominated by model-provider guardrails from OpenAI, Google, and Anthropic; dedicated agent-security vendors barely register. Satisfaction with this borrowed stack averages 4.2/5, but two-thirds plan to switch tooling within a year. Only 30% isolate high-risk agents, and isolation drops as company size grows—larger firms hit a 63% incident rate with just 20% isolation. Spending is a thin slice of the security budget, and only a third believe their defenses are ahead of AI-enabled attackers.

Why it matters: Solid survey data with a clear security-gap narrative, not a vague trend piece. The 54% incident rate, credential sharing, and low sandboxing rate all hit real agent-deployment pain points. Held below 80 because it's a vendor-backed survey, not independent research, and method...