AI agents are exposing a security gap between the data they read and the systems they can change (venturebeat.com)