Simply giving an agent a user account is dangerous. An agent creator is liable for its actions, and the agent has no right to privacy. This requires a new identity and access management (IAM) paradigm, distinct from human user accounts, to manage liability and oversight.

Current AI tools are in "easy mode" because they operate with the user's direct authentication and permissions. The much harder, yet-to-be-solved problem is "hard mode": autonomous agents that need their own scoped access to enterprise resources without dramatically increasing security risks.

The global banking system is designed to verify human identity. Autonomous AI agents cannot answer the fundamental question 'Who is this person?', making them incompatible. This architectural mismatch, not a regulatory gap, necessitates a new financial system built on crypto rails out of pure necessity.

A major security flaw in AI agents is 'prompt injection.' If an AI accesses external data (e.g., a blog post), a malicious actor can embed hidden commands in that data, tricking the AI into executing them. There is currently no robust defense against this.

Granting AI agents access to sensitive information like credit card numbers is extremely risky. The host's card details were leaked and used for fraudulent charges within 24 hours of providing them to an agent, highlighting severe security vulnerabilities in current systems.

To enable agentic e-commerce while mitigating risk, major card networks are exploring how to issue credit cards directly to AI agents. These cards would have built-in limitations, such as spending caps (e.g., $200), allowing agents to execute purchases autonomously within safe financial guardrails.

Security's focus shifted from physical (bodyguards) to digital (cybersecurity) with the internet. As AI agents become primary economic actors, security must undergo a similar fundamental reinvention. The core business value may be the same (like Blockbuster vs. Netflix), but the security architecture must be rebuilt from first principles.

Research shows that text invisible to humans can be embedded on websites to give malicious commands to AI browsers. This "prompt injection" vulnerability could allow bad actors to hijack the browser to perform unauthorized actions like transferring funds, posing a major security and trust issue for the entire category.

AI agents are a security nightmare due to a "lethal trifecta" of vulnerabilities: 1) access to private user data, 2) exposure to untrusted content (like emails), and 3) the ability to execute actions. This combination creates a massive attack surface for prompt injections.