Skip to main content
Add as a preferred source on Google


Sophos Launches Tool for Shadow AI Defense

  • By Sean Parker
  • 10/26/26

Key Takeaways

  • Cybersecurity firm Sophos says unauthorized AI tools and agents are creating security visibility challenges for organizations as AI adoption increases.
  • Research cited by Sophos found that 69% of organizations suspect or have evidence of unauthorized AI use, while 82% reported discovering shadow AI agents.
  • Sophos has launched AI Defense to identify AI activity, enforce security policies, and help prevent sensitive data exposure.

Unauthorized artificial intelligence tools and agents are creating security risks for organizations as AI adoption increases, according to cybersecurity company Sophos. In a recent product announcement, the company highlighted the growing use of shadow AI, referring to AI tools and agents operating without formal organizational approval or oversight. The security firm cited research indicating that 69% of organizations suspect or have evidence of unauthorized AI use.

Separate research from Gartner and Cloud Security Alliance found that 82% of organizations discovered shadow AI agents in their environments during the previous year.

Unauthorized AI Creates Security Visibility Gaps

According to the security firm, organizations have struggled to identify which AI tools employees use, what information those tools access, and whether their use complies with security policies.

"Organizations are adopting AI faster than they can secure it, and most security teams can't answer three basic questions: which AI tools are running, what data is going into them, and whether that activity lines up with policy," said Kyle Falkenhagen, senior vice president of product management at Sophos.

The company also cited an IDC projection that the number of AI agents could reach 1.3 billion by 2028.

Sophos researchers reported observing attackers use AI agents within a customer's network to build and test nearly 80 malware modules.

Sophos Launches AI Defense

The cybersecurity firm announced the general availability of Sophos AI Defense, a security offering designed to identify AI tools, monitor their activity, and enforce organizational security policies.

The product operates through Sophos Fusion, the company's cybersecurity platform, and uses information from devices, networks, identity systems, and browsers.

According to the company, AI Defense can inspect prompts, uploads, and other AI interactions to identify potentially risky activity and help prevent sensitive data exposure.

For more information, go to the Sophos site.

Featured

  • circuit patterns

    Anthropic Intros Lower-Cost Claude Sonnet 5

    Anthropic has launched Claude Sonnet 5, positioning the model as its most autonomous mid-tier offering to date and a lower-cost alternative to its flagship Opus 4.8 system. The company said the model can plan multi-step tasks, operate tools such as browsers and terminals, and complete agentic work at a level that previously required larger and more expensive models.

  • A digital shield composed of glowing particles

    Microsoft Combines Sentinel and Defender Capabilities for Agentic Security Operations

    Microsoft is combining its security information and event management and threat protection products within Microsoft Defender, creating what the company calls an Integrated Security Operations Center built for an era of AI-driven attacks.

  • Graduation cap with a lightbulb on the book and icon learning in the classroom.

    Department of Education Issues New Guidance on Education Technology and Screen Time

    In an Aug. 20 Dear Colleague Letter from Kirsten Baesler, assistant secretary of the United States Department of Education's Office of Elementary and Secondary Education, ED outlines new guidance to frame the national conversation around the educational value of technology in schools.

  • Image of digital screen with data and math formulas on black background

    AI Models Generate Advances in Mathematical Research

    OpenAI has announced what it says is an AI-generated solution to the Navier-Stokes existence and smoothness problem, one of mathematics' seven Millennium Prize Problems, while Anthropic has reported separate advances in research mathematics and formal proof generation.