Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Druva: Agentic AI Is Already Your Biggest Attack Surface

Druva
09/01/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


It's not a future set statement. It's a current statement. And let me walk you through how. A lot of enterprises have integrated AI technologies. In an agentic world, where you have a level of autonomy given to an AI-based bot. And an agentic world means that there's a sense of act in the AI that it can act on your behalf. And if you've already given an email access, you're practically given the AI bot access to your two-factor authentication, which is the genesis of an access to any application in enterprise. Any attack in that particular equation has a massively large surface area. Now it may not happen because those applications are highly secure and tightly managed, but security is all about risk mitigation. From a risk mitigation perspective, the surface area is extremely large. And in the world where autonomy is becoming more and more obvious and the world is going towards, how can I use AI to be doing more for me? The risk factor amplifies quite a bit.

TL;DR

  • Agentic AI systems that act autonomously on behalf of users already have broad enterprise access — this is a present-day risk, not a future concern.
  • Granting an AI agent access to email effectively grants it access to two-factor authentication, which is the gateway to every enterprise application.
  • Even in well-secured environments, the sheer size of the attack surface created by AI agent permissions represents a significant risk management challenge that grows as AI adoption increases.

Summary

In this short executive clip, Druva CEO Jaspreet Singh delivers a pointed warning about agentic AI and the enterprise attack surface it creates today — not in some hypothetical future. Singh explains that as organizations integrate AI agents capable of acting autonomously on behalf of users, they are inadvertently granting those agents access to email inboxes. Because email is the delivery channel for two-factor authentication codes, that single permission effectively unlocks every application in the enterprise environment. The attack surface this creates is not incremental — it is exponential. Singh acknowledges that well-secured, tightly managed applications reduce the likelihood of exploitation, but frames the issue through a risk mitigation lens: the surface area is already extremely large, and as enterprise adoption of autonomous AI accelerates, the risk factor amplifies rather than stabilizes. The message is a clear call for security leaders to reassess how AI agent permissions are scoped and governed before autonomous access becomes an unmanageable liability.

Chapters

0:00 - AI Access Is Already Here
0:09 - How Agentic AI Works
0:26 - Email, 2FA, and Full Enterprise Exposure
0:49 - Risk Amplification as AI Autonomy Grows

Key Quotes

0:00 "I think AI already has access to all the applications. It's not a future set statement. It's a current statement."
0:26 "If you've already given an email access, you're practically given the AI bot access to your two-factor authentication, which is the genesis of an access to any application in enterprise."
0:49 "Security is all about risk mitigation. From a risk mitigation perspective, the surface area is extremely large."

FAQ

Why is email access so dangerous to grant an AI agent?

Email is the delivery channel for two-factor authentication codes. If an AI agent can read your email, it can intercept 2FA tokens, which effectively gives it authenticated access to any enterprise application that relies on email-based verification.

Does this mean enterprises should stop using agentic AI?

Singh does not advocate for halting AI adoption. Instead, he emphasizes risk mitigation — acknowledging that tightly managed applications reduce exploitation likelihood, but stressing that the attack surface is already very large and grows as AI autonomy increases.


Categories:
  • » Webinar Library » Druva
  • » Cybersecurity » Cloud Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • AI & Machine Learning
  • Cloud Security
  • Identity & Access
  • Threat Intelligence
  • Executive Briefing
  • Short Form
  • Agentic AI security
  • Enterprise attack surface
  • Two-factor authentication risk
  • AI governance
  • Privileged access management
  • Risk mitigation
  • AI autonomy
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Druva: Agentic AI Is Already Your Biggest Attack Surface

              Upcoming 360 View Events

              • Nov
                19

                360View: Govern, Secure & Recover Your Microsoft 365 Environment

                11/19/202601:00 PM ET
                More events

                XStreaminars (watch here)

                • Oct
                  27

                  Illumio: See It. Stop It. Contain It. Lateral Movement Defense in Action

                  10/27/202611:00 AM ET
                  • Oct
                    28

                    EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure

                    10/28/202601:00 PM ET
                    • Nov
                      12

                      Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision

                      11/12/202601:00 PM ET
                      More events

                      Industry Events (Sponsor Hosted)

                      • Oct
                        20

                        Harnessing Data Governance for AI with Cyera and Snowflake

                        10/20/202611:00 AM ET
                        • Oct
                          27

                          Maximize Security, Value, and Returns on Your Microsoft Investment

                          10/27/202611:00 AM ET
                          • Oct
                            27

                            The HUMAN Experience: Real-Time Insights into Page Intelligence

                            10/27/202601:00 PM ET
                            • Oct
                              28

                              Ensuring AI Security Across the APAC Region

                              10/28/202601:00 AM ET
                              • Oct
                                28

                                EMEA: Ensuring Comprehensive Security for AI Applications

                                10/28/202606:00 AM ET
                                More events

                                Upcoming Webinar Calendar

                                • 10/20/2026
                                  11:00 AM
                                  10/20/2026
                                  Harnessing Data Governance for AI with Cyera and Snowflake
                                  https://www.truthinit.com/index.php/channel/2137/harnessing-data-governance-for-ai-with-cyera-and-snowflake/
                                • 10/27/2026
                                  11:00 AM
                                  10/27/2026
                                  Maximize Security, Value, and Returns on Your Microsoft Investment
                                  https://www.truthinit.com/index.php/channel/2178/maximize-security-value-and-returns-on-your-microsoft-investment/
                                • 10/27/2026
                                  11:00 AM
                                  10/27/2026
                                  Illumio: See It. Stop It. Contain It. Lateral Movement Defense in Action
                                  https://www.truthinit.com/index.php/channel/2182/see-it-stop-it-contain-it-lateral-movement-defense-in-action/
                                • 10/27/2026
                                  01:00 PM
                                  10/27/2026
                                  The HUMAN Experience: Real-Time Insights into Page Intelligence
                                  https://www.truthinit.com/index.php/channel/2139/the-human-experience-real-time-insights-into-page-intelligence/
                                • 10/28/2026
                                  01:00 AM
                                  10/28/2026
                                  Ensuring AI Security Across the APAC Region
                                  https://www.truthinit.com/index.php/channel/2125/ensuring-ai-security-across-the-apac-region/
                                • 10/28/2026
                                  06:00 AM
                                  10/28/2026
                                  EMEA: Ensuring Comprehensive Security for AI Applications
                                  https://www.truthinit.com/index.php/channel/2127/emea-ensuring-comprehensive-security-for-ai-applications/
                                • 10/28/2026
                                  01:00 PM
                                  10/28/2026
                                  AMERICAS: Safeguarding AI Across All Fronts
                                  https://www.truthinit.com/index.php/channel/2126/americas-safeguarding-ai-across-all-fronts/
                                • 10/28/2026
                                  01:00 PM
                                  10/28/2026
                                  EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure
                                  https://www.truthinit.com/index.php/channel/2179/envzero-near-zero-time-to-resolution-live-agentic-remediation-for-failed-and-drifted-infrastructure/
                                • 11/04/2026
                                  11:00 AM
                                  11/04/2026
                                  Aligning Agentic Intent: Understanding Your Agents' Purpose vs. Their Actions
                                  https://www.truthinit.com/index.php/channel/2158/aligning-agentic-intent-understanding-your-agents-purpose-vs-their-actions/
                                • 11/05/2026
                                  02:00 PM
                                  11/05/2026
                                  HUMAN Dialogue: Embracing the Era of AI-Driven Consumers.
                                  https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-era-of-ai-driven-consumers/
                                • 11/05/2026
                                  02:00 PM
                                  11/05/2026
                                  Reclaim Your Evenings: Leverage Data Intelligence to Minimize Risk and Boost AI Adoption
                                  https://www.truthinit.com/index.php/channel/2172/reclaim-your-evenings-leverage-data-intelligence-to-minimize-risk-and-boost-ai-adoption/
                                • 11/12/2026
                                  01:00 PM
                                  11/12/2026
                                  Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision
                                  https://www.truthinit.com/index.php/channel/2192/leaving-vmware-means-leaving-vsan-your-vmware-exit-is-really-a-storage-decision/
                                • 11/19/2026
                                  01:00 PM
                                  11/19/2026
                                  360View: Govern, Secure & Recover Your Microsoft 365 Environment
                                  https://www.truthinit.com/index.php/channel/2076/360view-govern-secure-recover-your-microsoft-365-environment/
                                • 11/19/2026
                                  01:00 PM
                                  11/19/2026
                                  Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents
                                  https://www.truthinit.com/index.php/channel/2181/zendesk-deep-dive-get-the-work-done-faster-with-employee-service-ai-agents/
                                Truth in IT
                                • Sponsor
                                • About Us
                                • Terms of Service
                                • Privacy Policy
                                • Contact Us
                                • Preference Management
                                Desktop version
                                Standard version