Five Eyes warn agentic AI is too dangerous for rapid rollout • The Register

https://www.theregister.com/2026/05/04/five_eyes_agentic_ai_recommendations/

Publish Date: 2026-05-03 22:35:00

Information security agencies from the nations of the Five Eyes security alliance have co-authored guidance on the use of agentic AI that warns the technology will likely misbehave and amplifies organizations’ existing frailties, and therefore recommend slow and careful adoption of the tech.

The agencies delivered that position last Friday in a guide titled Careful adoption of agentic AI services [PDF] that opens with the observation that “Agentic artificial intelligence (AI) systems increasingly operate across critical infrastructure and defense sectors and support mission-critical capabilities,” making it “crucial for defenders to implement security controls to protect national security and critical infrastructure from agentic AI-specific risks.”

Until security practices, evaluation methods and standards mature, organisations should assume that agentic AI systems may behave unexpectedly

The thrust of the document is that implementing agentic AI will require use of many components, tools, and external data sources, creating an “interconnected attack surface that malicious actors can exploit.”

“Consequently, every individual component in an agentic AI system widens the attack surface, exposing the system to additional avenues of exploitation,” the document warns.

To illustrate the risks agentic AI poses, the document offers the example of an AI agent empowered to install software patches that is thoughtlessly given broad write access permissions, with the following unpleasant results:

Here’s another nasty agentic mess the document uses as a warning:

An organization deploys agentic AI to autonomously manage procurement approvals and vendor communications, and gives the agent access to financial systems, email and contract repositories;
This user only considers permissions for the agent when deploying it;
Over time, other agents rely on the procurement agent’s outputs and implicitly trust its actions;
A malicious actor compromises a…

Source