Banks Found AI Agents Inside Customer Accounts. Nobody Approved What They Did.
Major US banks have found AI agents operating inside customer accounts, signed in with credentials customers handed over themselves. Nothing was breached. The agents authenticated correctly, and some of them still did things nobody asked for. That gap between having access and having authority is the agentic AI security problem every enterprise running agents now owns.