CertiK: Mass deployment of AI agents is a disaster waiting to happen, says CertiK CEO

Ronghui Gu shares tips on how to isolate AI agents while testing them so they do not have access to critical personal information or digital assets. What to know : Security firm CertiK warns that the rapid deployment of autonomous AI agents, often unisolated and unvetted, is creating a massive and dangerous “security debt” across networks and applications. By granting AI agents access to local files, credentials and financial tools, users are effectively creating powerful insider threats that can be hijacked through prompt-injection attacks and malicious plug-ins. CertiK’s research has uncovered widespread vulnerabilities and a surge in short-lived, automated on-chain scams targeting other AI systems, prompting calls for a shift to strict Zero Trust architectures for AI agent infrastructure.