ESET finds 3,000 malicious AI skills in 900K scanned; 40% of SMBs lack AI policy
TechNadu · x · 2026-09-22
Key findings
- ESET scanned 900,000 AI agent skills and flagged 3,000 malicious ones.
- A survey of 4,400 SMB decision-makers found 40% have no AI policy in place.
Why it matters
ESET highlights that agents often hold legitimate access to business systems, so malicious skills, compromised dependencies, or prompt injection can all become pathways to company data — a stealthier attack surface than classic malware.
The report also notes SMBs face faster-moving traditional attacks (phishing, ransomware) while lagging on both governance and security tooling.
Related event: ESET Finds 3,000 Malicious Skills Among 900K AI Agent Tools(2 posts)→
More from Safety
- Senate Bill Would Force Big Platforms to Accept AI Agents, Raising Auth Privacy Questions — Prof_CarlaReyes · 2026-11-12
- United Airlines Bans AI Agents From Booking Flights Over Data and Legal Risks — rohanpaul_ai · 2026-11-12
- Stanford HAI blueprint: 56 US agencies report 3,611 AI use cases, evaluation lags — StanfordHAI · 2026-11-12
- Focused task framing boosts agent boundary testing by ~60 points; VM escape still fails — perplexity_ai · 2026-11-12
- Perplexity red-teams its SPACE VM sandbox: CTF prompts mislead agent security testing — perplexity_ai · 2026-11-12
- Narayanan: blanket bans on teen AI companions are bad policy; incentivize pro-social design instead — random_walker · 2026-11-12