AI agents are already deployed across enterprises. They touch company data, hold permissions, and perform actions on behalf of employees. But most organizations have no visibility into what these digital workers are actually doing. This isn't shadow IT where someone installs unauthorized software. This is shadow AI, and it's moving faster than any governance framework was built to handle.

Shahar Tal is a veteran of Israel's elite 8200 unit and former senior executive at Checkpoint and Celebrite. In 2024, he co-founded Cyata (https://cyata.ai) with fellow 8200 alumni to solve agentic security. The company raised $8.5 million in seed funding and seven months out of stealth got acquired by Checkpoint Software Technologies. Shahar and his researchers have been mapping vulnerabilities in major agentic frameworks that most organizations don't know exist yet. They'll disclose findings at Black Hat this August.

We discuss why AI agents represent the biggest enterprise shift since the cloud, what agentic identity actually means, and why demand is outrunning governance. Shahar explains how prompt injection enables real exploits at scale, why security teams need to stop being the brake pedal and start enabling safe AI use, and what CISOs should ask internally before agents run blind. If you're building AI systems, running enterprise security, or trying to understand where the real risk lies, this conversation matters.