The SMB AI Security Crisis: When Shadow AI Agents Become Attack Vectors
Small and mid-size businesses (SMBs) are rapidly adopting AI agents for competitive advantage, deploying multi-agent systems where supervisor agents manage specialist agent swarms. However, this adoption creates significant cybersecurity risks as 40% of SMBs lack AI policies according to ESET's 2026 survey of 4,400 decision-makers. Between March and May 2026, ESET scanned nearly 900,000 AI skills from repositories, finding over 25,000 suspicious and 3,000 malicious skills leading to credential theft and data exfiltration. Attackers are exploiting AI through indirect prompt injection, malicious skills, and supply chain compromises while using AI to enhance traditional attacks like phishing, achieving 54% click-through rates versus 12% for standard attempts. This incident highlights the emergence of 'shadow AI' risks where employees deploy unsanctioned AI agents with excessive permissions, creating new attack vectors for lateral movement and data exfiltration while traditional threats like ransomware and vulnerability exploitation continue to plague resource-constrained SMBs.
Kill Chain
