The race to deploy AI agents just outran the controls to manage them. This week three numbers proved it.

• The breach: Straiker (which raised $64M) found 91% of attacks on production AI agents silently exfiltrate data, and 36% of attacks on coding agents achieve remote code execution. A separate Amazon Q Developer flaw let a booby-trapped repo steal a developer's cloud credentials with no clicks.
• The bill: GitHub Copilot's first metered billing cycle closed June 30 — agentic dev teams report $750–$3,000/month per developer, up from a $29 flat rate. IDC says the largest firms will underestimate AI infrastructure costs by 30% through 2027.
• The failure rate: Gartner projects 40% of agentic-AI projects canceled by 2027 on cost, unclear value, and weak controls.

Host Stephen Forte on the breach, the bill, and the failure rate — and three moves before your next board meeting: run an agent inventory, set per-developer spend caps, and make audit-trail detection a required vendor question.

Sources: PR Newswire; The Hacker News; Visual Studio Magazine; Gartner; TechCrunch; MIT Sloan.