Shadow Agents at Scale

This episode examines the structural security gap between what enterprise teams believe about their AI agent deployments and what is actually running, anchored by the n8n supply chain attack tracked as CVE-2026-21858 and GHSA-77g5-qpc3-x24r. - Shadow agent risk: Why OAuth-connected autonomous agents operating under employee identities are harder to detect than traditional shadow SaaS - n8n kill chain: How malicious npm packages disguised as community nodes silently exfiltrate OAuth tokens from no-code automation stacks - Microsoft Agent 365: What the May 1 GA release actually covers at $15 per user, and the personal-account blind spot it cannot address - Governance debt: The zombie agent accumulation problem created when only 21% of organizations have a formal decommissioning process Listeners leave with two concrete detection queries: an Entra ID app consent report filtered for high-privilege OAuth scopes granted in the last 90 days, and a DNS and proxy log hunt for outbound LLM API traffic from unapproved automation hosts.