Salt Security 1H 2026: 48.9% of Orgs Blind to Machine-to-Machine Agent Traffic, 99% of Attacks from Authenticated Sources

Salt Security·medium signal

Salt Security surveyed 327 security professionals finding 48.9% of organizations are entirely blind to machine-to-machine traffic and 48.3% cannot distinguish legitimate AI agents from malicious bots. The most alarming finding: 99% of attack attempts originate from authenticated sources — rogue agents using legitimate credentials. Only 8% of organizations have advanced security maturity for agentic environments.