The Agents Nobody Meant to Build
CIO, Monday, October 19th, 2026
Employees scheduling jobs in sanctioned AI tools are creating unowned agents that can become critical, risky back-office processes.
The author argues that the hardest shadow AI problem is no longer unsanctioned tools but agents employees build without realizing it inside fully sanctioned AI desktop tools.
A scheduled job that scans email and drafts replies is a personal productivity aid, but one that reads a shared inbox and updates the ERP becomes part of back-office automation with no owner, no approval record and a new attack surface for malicious email.
Citing Gartner forecasts that 40% of enterprise apps will carry task-specific agents this year and 40% of enterprises will have to demote or shut down agents by 2027, the piece calls for discovering and governing these de facto agents.