API keys and credentials. Agents operate inside authorized permissions where firewalls can't see. Traditional security models weren't built for this. Your developers are already experimenting.
Experts uncovered malicious Chrome extensions that replace affiliate links, exfiltrate data, and steal ChatGPT authentication tokens from users.