Agent AI Era Exposes Massive Identity Gaps, Orchid Security Warns

Enterprises rushing to adopt Agent AI are doing so on a foundation riddled with unseen risks, according to new research from Orchid Security. Their May 2026 ‘Identity Gap: Snapshot 2026’ report reveals that ‘identity dark matter’—unmanaged and unknown identity elements—now constitutes 57% of an organization’s identity landscape, dwarfing the visible 43%. This dramatic imbalance creates a wide-open attack surface just as AI-driven agents promise to accelerate both business processes and potential breaches.

This stark finding from The Hacker News highlights a critical disconnect: the rapid deployment of powerful AI tools is outpacing fundamental identity hygiene. Attackers will undoubtedly exploit this ‘dark matter’—dormant accounts, misconfigured permissions, orphaned credentials—to gain initial access and move laterally. The implications for CISOs are severe; relying on visible identity controls alone is like defending a castle while ignoring the tunnels beneath.