Tag
Major US banks report discovering unauthorized AI agents operating inside customer accounts, typically using the customer's own login credentials, raising concerns that current password-based authentication cannot distinguish between a user and an authorized or rogue agent. The situation prompts debate over whether agents should use their own scoped credentials rather than sharing customer logins.
This paper models how a compromise in an AI vendor could propagate through the banking system, examining cyber-financial contagion risks.