97% of Enterprises Expect Major AI Agent Security Incident Within 12 Months, Only 6% of Security Budgets Allocated

Security Boulevard·high signal

A new 2026 Agentic AI Security Report surveying 300 enterprise leaders across financial services, healthcare, tech, and retail found 97% expect a material AI-agent-driven security or fraud incident within 12 months, with nearly half expecting one within 6 months. Despite this near-universal alarm, only 6% of security budgets are allocated to agent security. AI agents are already operating inside enterprise systems through service accounts, API tokens, and application identities carrying significant privileges — retrieving data, triggering transactions, and interacting across services through legitimate credentials.