Arrakis Report: 76% of Enabled AI Agents Haven't Run in 60 Days, 99.4% Lack DLP on Sensitive Connections

Arrakis Security's 2026 Autonomous Agents Threat Report found 76% of enabled AI agents it examined had not run in 60 days and 44% had been inactive for 180+ days, yet retained live credentials and system access. 22.9% of agents had at least one unsecured trigger (such as unsigned webhooks) that would allow remote activation, 70% were wired to at least one sensitive integration, and 99.4% had no verified DLP coverage on that sensitive connection.