{"id":14214,"date":"2026-10-26T09:46:15","date_gmt":"2026-10-26T07:46:15","guid":{"rendered":"https:\/\/www.withsecure.com\/?p=14214"},"modified":"2026-10-26T09:54:00","modified_gmt":"2026-10-26T07:54:00","slug":"the-shadow-aiceberg-what-security-teams-dont-see","status":"publish","type":"post","link":"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/the-shadow-aiceberg-what-security-teams-dont-see\/","title":{"rendered":"The Shadow AIceberg  What Security Teams Don&#8217;t See"},"content":{"rendered":"<section\n    class=\"wp-block-one-column-block edwp-block js-wp-block-one-column-block wp-block-one-column-block--content-1 wp-block-one-column-block--meta-sharing layout--spacing-xxxxl-top layout--spacing-xl-bottom\"\n    >\n    <div class=\"wp-block-one-column-block__container\">\n                                                                                                                                    <div class=\"wp-component-image__wrapper wp-block-one-column-block__image fade-in\">\n                    <\/div>\n                                                                    <div class='wp-block-one-column-block__meta-sharing-grid'><div class=\"wp-component-content wp-component-content--default wp-block-one-column-block__content fade-in\">\n            <h1 class=\"wp-component-heading text--h2 wp-component-content__title\">\n    The Shadow AIceberg: <span class=\"blue-text\">What Security Teams Don&#8217;t See<\/span><\/h1>                    <div class=\"wp-component-content__inner\">\n                                                    <div class=\"wp-component-content__meta\">\n                                                    <span class=\"wp-component-content__content-type\">\n                                Blog                            <\/span>\n                                                                            <span class=\"wp-component-content__meta-categories\">\n                                                                    <span class=\"wp-component-content__meta-category\">\n                                        AI                                    <\/span>\n                                                                    <span class=\"wp-component-content__meta-category\">\n                                        AI Security                                    <\/span>\n                                                            <\/span>\n                                                                                                    <span class=\"wp-component-content__meta-date\">\n                                Oct 26, 2026                            <\/span>\n                                                                    <\/div>\n                                            <\/div>\n                <\/div><section\n    class=\"wp-block-sharing-icons edwp-block wp-block-sharing-icons--disable-border wp-block-sharing-icons--content-1 wp-block-sharing-icons--disable-container wp-block-one-column-block__sharing fade-in wp-block-one-column-block__sharing fade-in\"\n    >\n    <div class=\"wp-block-sharing-icons__container\">\n        <div class=\"wp-block-sharing-icons__inner\">\n                            <p class=\"wp-block-sharing-icons__title fade-in\">\n                    Share this                <\/p>\n                        <div class=\"wp-component-socials wp-component-socials--dark-mode\">\n    \n            <a\n            href=\"https:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/the-shadow-aiceberg-what-security-teams-dont-see\/&#038;title=The%20Shadow%20AIceberg%20%20What%20Security%20Teams%20Don&#8217;t%20See\"\n            target=\"_blank\"\n            rel=\"noreferer noopener\"\n            class=\"wp-component-socials__link\"\n            title=\"Share on Linkedin\"\n        >\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#linkedin'><\/use>\n            <\/svg>        <\/a>\n    \n            <a\n            href=\"http:\/\/x.com\/share?text=The Shadow AIceberg  What Security Teams Don&#8217;t See&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/the-shadow-aiceberg-what-security-teams-dont-see\/\"\n            target=\"_blank\"\n            rel=\"noreferer noopener\"\n            class=\"wp-component-socials__link wp-component-socials__link--twitter\"\n            title=\"Share on Twitter\"\n        >\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#x'><\/use>\n            <\/svg>        <\/a>\n    \n    \n    <\/div>\n        <\/div>\n    <\/div>\n<\/section>\n<\/div>                                                                                <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-one-column-block edwp-block js-wp-block-one-column-block wp-block-one-column-block--content-1 layout--spacing-xxxl-bottom\"\n    >\n    <div class=\"wp-block-one-column-block__container\">\n                                                                                                                                    <div class=\"wp-component-image__wrapper wp-block-one-column-block__image fade-in\">\n                    <figure class=\"wp-component-image__figure\">\n                                            <img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"1080\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg.webp\" class=\"wp-component-image\n                            wp-component-image--desktop\n                            wp-component-image--mobile\n                            wp-component-image--ratio-content-25-1 wp-component-image--fit-cover\" alt=\"AI Security hero image with iceberg\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg.webp 1920w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-300x169.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1024x576.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-768x432.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1536x864.jpg.webp 1536w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-447x251.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-700x394.jpg.webp 700w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-260x146.jpg.webp 260w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\" \/>                                                    <\/figure>\n                    <\/div>\n                                                                                <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-two-column-block edwp-block js-wp-block-two-column-block wp-block-two-column-block--content-1 wp-block-two-column-block__left--align-y-top wp-block-two-column-block__right--align-y-top wp-block-two-column-block--split-sidebar layout--none-top layout--spacing-xxxl-bottom\"\n    data-block-id=\"block_2f89c265c76d4b227324b7d3f5947d52\"\n    >\n    <div class=\"wp-block-two-column-block__container row-load\">\n                                                        <div class=\"wp-block-two-column-block__left\">\n                                <nav\n    class=\"wp-component-content-navigation wp-block-two-column-block__content-nav js-content-navigation\"\n    data-bem-base=\"wp-component-content-navigation\"\n    data-nav-column=\"left\"\n    data-nav-type=\"auto\"\n>\n            <p class=\"wp-component-content-navigation__title\">\n            Content        <\/p>\n    \n    <div class=\"wp-component-content-navigation__mobile\">\n        <label class=\"wp-component-content-navigation__mobile-label\">\n            <span class=\"wp-component-content-navigation__mobile-label-text\">\n                Content navigation            <\/span>\n            <select class=\"wp-component-content-navigation__select js-content-navigation-select\">\n                <option value=\"\">\n                    Select a section                <\/option>\n                            <\/select>\n        <\/label>\n    <\/div>\n\n    <div class=\"wp-component-content-navigation__desktop\">\n        <div class=\"wp-component-content-navigation__list-wrapper\">\n            <span\n                class=\"wp-component-content-navigation__indicator js-content-navigation-indicator\"\n                aria-hidden=\"true\"\n            ><\/span>\n            <ul class=\"wp-component-content-navigation__list js-content-navigation-list\">\n                            <\/ul>\n        <\/div>\n    <\/div>\n<\/nav>\n<section\n    class=\"wp-block-sharing-icons edwp-block wp-block-sharing-icons--disable-border wp-block-sharing-icons--disable-container wp-block-two-column-block__share wp-block-two-column-block__hide-mobile wp-block-two-column-block__share wp-block-two-column-block__hide-mobile\"\n    >\n    <div class=\"wp-block-sharing-icons__container\">\n        <div class=\"wp-block-sharing-icons__inner\">\n                            <p class=\"wp-block-sharing-icons__title fade-in\">\n                    Share this story                <\/p>\n                        <div class=\"wp-component-socials wp-component-socials--dark-mode\">\n    \n            <a\n            href=\"https:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/the-shadow-aiceberg-what-security-teams-dont-see\/&#038;title=The%20Shadow%20AIceberg%20%20What%20Security%20Teams%20Don&#8217;t%20See\"\n            target=\"_blank\"\n            rel=\"noreferer noopener\"\n            class=\"wp-component-socials__link\"\n            title=\"Share on Linkedin\"\n        >\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#linkedin'><\/use>\n            <\/svg>        <\/a>\n    \n            <a\n            href=\"http:\/\/x.com\/share?text=The Shadow AIceberg  What Security Teams Don&#8217;t See&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/the-shadow-aiceberg-what-security-teams-dont-see\/\"\n            target=\"_blank\"\n            rel=\"noreferer noopener\"\n            class=\"wp-component-socials__link wp-component-socials__link--twitter\"\n            title=\"Share on Twitter\"\n        >\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#x'><\/use>\n            <\/svg>        <\/a>\n    \n    \n    <\/div>\n        <\/div>\n    <\/div>\n<\/section>\n                <\/div>\n                                                <div class=\"wp-block-two-column-block__right\">\n                                <div class=\"wp-component-paragraph wp-block-two-column-block__paragraph \">\n    <p><span data-contrast=\"none\">Most security teams can already see the AI tools they approved. What they can&#8217;t see is everything beneath that: personal AI assistants employees bring to work, AI browser extensions quietly requesting broad permissions, AI agents operating under their own unmanaged credentials, and GenAI features embedded inside everyday SaaS apps. Each layer is less visible than the one above it, and each one is growing faster than governance can track.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:120}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">\u2713\u00a0 <\/span><\/b><span data-contrast=\"none\">Approved AI tools are the only part of the AI attack surface most security teams can currently see.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:215,&quot;335559739&quot;:100,&quot;335559740&quot;:319}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">\u2713\u00a0 <\/span><\/b><span data-contrast=\"none\">Employees&#8217; personal AI assistant accounts, used for work tasks on personal logins, sit entirely outside IT&#8217;s visibility.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:215,&quot;335559739&quot;:100,&quot;335559740&quot;:319}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">\u2713\u00a0 <\/span><\/b><span data-contrast=\"none\">AI browser extensions often request page-level read and write access on every site an employee visits.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:215,&quot;335559739&quot;:100,&quot;335559740&quot;:319}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">\u2713\u00a0 <\/span><\/b><span data-contrast=\"none\">Machine identities, including AI agents, are on track to outnumber human identities by more than 80 to 1. <\/span><b><span data-contrast=\"none\">[1]<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:215,&quot;335559739&quot;:100,&quot;335559740&quot;:319}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">\u2713\u00a0 <\/span><\/b><span data-contrast=\"none\">GenAI features embedded inside everyday SaaS tools process company data without ever going through a separate approval step.<\/span><\/p>\n<h2 aria-level=\"1\"><span data-contrast=\"none\">Picking up where we left off<\/span><span data-ccp-props=\"{&quot;335559738&quot;:400,&quot;335559739&quot;:160}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">Our first <\/span><a href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/ai-security-why-its-now-a-board-level-priority\/\"><span data-contrast=\"none\">blog<\/span><\/a><span data-contrast=\"none\"> in this series looked at why AI security has become a board-level issue. Our <\/span><a href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/introducing-ai-security-in-withsecure-elements\/\"><span data-contrast=\"none\">second<\/span><\/a><span data-contrast=\"none\"> covered how WithSecure is starting to answer it, beginning with visibility into shadow AI and agentic identities. This blog makes the scale of that visibility problem concrete, using an image that keeps coming up in conversations with security teams: the iceberg.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"1\"><span data-contrast=\"none\">The tip of the iceberg: approved AI tools<\/span><span data-ccp-props=\"{&quot;335559738&quot;:400,&quot;335559739&quot;:160}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">Ask most security teams what AI is running in their organisation, and they&#8217;ll point to what they approved: a named chatbot license, a Copilot rollout, maybe an AI feature in the CRM that procurement signed off on. That&#8217;s real, and it&#8217;s worth tracking. But it&#8217;s also the smallest and most visible part of the problem, the tip of the iceberg sitting above the waterline. Everything else is underneath, and it&#8217;s bigger than the part anyone can see.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"1\"><span data-contrast=\"none\">Four layers hiding beneath the surface<\/span><span data-ccp-props=\"{&quot;335559738&quot;:400,&quot;335559739&quot;:160}\">\u00a0<\/span><\/h2>\n<p aria-level=\"2\"><strong>Personal AI assistants\u00a0<\/strong><\/p>\n<p><span data-contrast=\"none\">Employees don&#8217;t wait for an approved rollout. They sign up for a free or personal-tier AI assistant with their own email address and start using it for work tasks: drafting emails, summarising documents, writing code. None of that activity touches a corporate account, so there&#8217;s no audit trail and no device-level signal that would normally flag it. It&#8217;s the most common layer and the hardest to see, because it looks, from the network&#8217;s perspective, like an employee simply browsing the web.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<p aria-level=\"2\"><strong>AI browser extensions\u00a0<\/strong><\/p>\n<p><span data-contrast=\"none\">Sidebar AI tools, the kind that add a chat panel to every page a person visits, are popular precisely because they&#8217;re easy to install and hard to police. Many request broad permissions just to function, including the ability to read and change data on every site visited. If an extension turns out to be malicious, or is compromised after installation, an attacker can use that same access to pull sensitive data, credentials, and proprietary code straight from the pages an employee works in. Traditional antivirus struggles here because these tools often load their payload dynamically from a remote server after installation, so there&#8217;s no file sitting on disk to catch.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<p aria-level=\"2\"><strong>AI agents and their credentials\u00a0<\/strong><\/p>\n<p><span data-contrast=\"none\">Every new AI agent, coding assistant, or GenAI integration typically spins up its own credentials, tokens, or service accounts, most of which escape central tracking. These machine identities are already projected to outnumber human identities by more than 80 to 1, and agents often carry more standing privilege than the humans who built them. <\/span><b><span data-contrast=\"none\">[1]<\/span><\/b><span data-contrast=\"none\"> Without visibility into what an agent can actually reach, that excess privilege becomes an unmonitored path for data exfiltration or lateral movement, the same risk as the browser-extension problem, just operating at agent scale.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<p aria-level=\"2\"><strong>GenAI inside SaaS apps\u00a0<\/strong><\/p>\n<p><span data-contrast=\"none\">The deepest and least visible layer is GenAI that arrives already built into a tool the organisation already approved. A CRM gets an AI-assisted writing feature, a collaboration platform gets an AI meeting summariser, a help desk tool gets an AI-drafted reply suggestion. None of it requires a new procurement decision, because the parent application was already sanctioned. <\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"1\"><span data-contrast=\"none\">Why the hidden layers matter more than the visible one<\/span><span data-ccp-props=\"{&quot;335559738&quot;:400,&quot;335559739&quot;:160}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">Only 41% of cybersecurity teams are involved in the planning phase of a generative AI rollout, and 89% of business technologists say they&#8217;d bypass cybersecurity guidance entirely if it stood between them and a business objective. That&#8217;s exactly how an iceberg grows underwater while the visible tip stays the same size: each new AI tool, extension, agent, or embedded feature adds mass below the surface long before anyone decides whether it belongs there.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<table data-tablestyle=\"MsoNormalTable\" data-tablelook=\"1696\" aria-rowcount=\"5\" aria-colcount=\"4\">\n<tbody>\n<tr aria-rowindex=\"1\">\n<td class=\"blue-text\" data-celllook=\"69905\"><b><span data-contrast=\"none\">Hidden layer<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td class=\"blue-text\" data-celllook=\"69905\"><b><span data-contrast=\"none\">What it looks like<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td class=\"blue-text\" data-celllook=\"69905\"><b><span data-contrast=\"none\">Why it&#8217;s missed<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td class=\"blue-text\" data-celllook=\"69905\"><b><span data-contrast=\"none\">What closes the gap<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<\/tr>\n<tr aria-rowindex=\"2\">\n<td data-celllook=\"69905\"><b><span data-contrast=\"none\">Personal AI assistants<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td data-celllook=\"69905\"><span data-contrast=\"none\">Employees using their own ChatGPT, Claude, or Gemini logins for work tasks<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td data-celllook=\"69905\"><span data-contrast=\"none\">No corporate account, no audit trail, no device-level signal<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td data-celllook=\"69905\"><span data-contrast=\"none\">Shadow AI software view in software inventory, whether or not the tool was installed<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<\/tr>\n<tr aria-rowindex=\"3\">\n<td data-celllook=\"69905\"><b><span data-contrast=\"none\">AI browser extensions<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td data-celllook=\"69905\"><span data-contrast=\"none\">Sidebar tools like ChatGPT&#8217;s extension or Perplexity requesting page-level access<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td data-celllook=\"69905\"><span data-contrast=\"none\">Loads dynamically from a remote server, so there&#8217;s no file for antivirus to scan<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td data-celllook=\"69905\"><span data-contrast=\"none\">Browser extension discovery plus Browsing Protection at runtime<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<\/tr>\n<tr aria-rowindex=\"4\">\n<td data-celllook=\"69905\"><b><span data-contrast=\"none\">AI agents &amp; their credentials<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td data-celllook=\"69905\"><span data-contrast=\"none\">Agents, coding assistants, and GenAI tools spinning up their own tokens and service accounts<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td data-celllook=\"69905\"><span data-contrast=\"none\">Machine identities are on track to outnumber human ones by more than 80 to 1<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td data-celllook=\"69905\"><span data-contrast=\"none\">Visibility into AI and agentic identities via the existing Microsoft Entra ID integration<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<\/tr>\n<tr aria-rowindex=\"5\">\n<td data-celllook=\"69905\"><b><span data-contrast=\"none\">GenAI inside SaaS apps<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td data-celllook=\"69905\"><span data-contrast=\"none\">AI features embedded in everyday platforms, processing company data as part of the core product<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td data-celllook=\"69905\"><span data-contrast=\"none\">Never goes through a separate approval step, so it rides in on an already-approved tool<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td data-celllook=\"69905\"><span data-contrast=\"none\">The next frontier: extending visibility from the tool itself to the AI capability inside it<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span data-contrast=\"none\">\u00a0<\/span><span data-ccp-props=\"{&quot;335559738&quot;:200}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"1\"><span data-contrast=\"none\">Frequently asked questions<\/span><span data-ccp-props=\"{&quot;335559738&quot;:400,&quot;335559739&quot;:160}\">\u00a0<\/span><\/h2>\n<p><b><span data-contrast=\"none\">What is the shadow AI iceberg?<\/span><\/b><span data-ccp-props=\"{&quot;335559738&quot;:160,&quot;335559739&quot;:60}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">It&#8217;s a way of visualising that the AI tools a security team has approved and can see are only a small, visible fraction of all the AI actually in use. Personal AI assistants, browser extensions, agent credentials, and embedded GenAI features make up the much larger, hidden majority.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:60,&quot;335559740&quot;:319}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">What&#8217;s the difference between shadow AI and sanctioned AI?<\/span><\/b><span data-ccp-props=\"{&quot;335559738&quot;:160,&quot;335559739&quot;:60}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Sanctioned AI has gone through procurement, security review, and a managed account. Shadow AI is anything used outside that process, from a personal chatbot login to an AI browser extension nobody asked IT about.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:60,&quot;335559740&quot;:319}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">Why are AI agent credentials harder to track than human accounts?<\/span><\/b><span data-ccp-props=\"{&quot;335559738&quot;:160,&quot;335559739&quot;:60}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Agents generate their own tokens and service accounts automatically, often with broader access than the person who configured them, and most organisations don&#8217;t yet treat agent identities with the same rigor as human ones.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:60,&quot;335559740&quot;:319}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">Can blocking AI browser extensions solve the problem?<\/span><\/b><span data-ccp-props=\"{&quot;335559738&quot;:160,&quot;335559739&quot;:60}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Blocking helps, but it only addresses one layer. Extensions are a known, visible-once-you-look-for-it problem; personal AI assistants, agent credentials, and embedded GenAI features each need their own kind of visibility.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:60,&quot;335559740&quot;:319}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">Is embedded GenAI inside SaaS apps really a bigger risk than standalone AI tools?<\/span><\/b><span data-ccp-props=\"{&quot;335559738&quot;:160,&quot;335559739&quot;:60}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">It&#8217;s a harder one to see, which is often more dangerous in practice. A standalone tool at least triggers a procurement conversation. GenAI embedded inside an already-approved app rides in without one.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:60,&quot;335559740&quot;:319}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"1\"><span data-contrast=\"none\">Start by looking below the waterline<\/span><span data-ccp-props=\"{&quot;335559738&quot;:400,&quot;335559739&quot;:160}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">None of these four layers are exotic or rare. They&#8217;re already present in most organisations today, just below a waterline most security tooling wasn&#8217;t built to see past. The fix isn&#8217;t a single control, it&#8217;s the same principle that applies to the visible tip: find it, then decide what to do about it.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">Curious what&#8217;s sitting below your own waterline? Let&#8217;s take a look together.<\/span><\/b><span data-ccp-props=\"{&quot;335559738&quot;:200,&quot;335559739&quot;:400}\">\u00a0<\/span><\/p>\n<p aria-level=\"1\"><strong>Sources\u00a0<\/strong><\/p>\n<p><b><span data-contrast=\"none\">[1] <\/span><\/b><span data-contrast=\"none\">Forrester Global IAM Market Forecast, 2024 to 2029. January 2026.<\/span><\/p>\n<\/div>\n<section\n    class=\"wp-block-sharing-icons edwp-block wp-block-sharing-icons--disable-border wp-block-sharing-icons--disable-container wp-block-two-column-block__share wp-block-two-column-block__mobile-after-right wp-block-two-column-block__share wp-block-two-column-block__mobile-after-right\"\n    >\n    <div class=\"wp-block-sharing-icons__container\">\n        <div class=\"wp-block-sharing-icons__inner\">\n                            <p class=\"wp-block-sharing-icons__title fade-in\">\n                    Share this story                <\/p>\n                        <div class=\"wp-component-socials wp-component-socials--dark-mode\">\n    \n            <a\n            href=\"https:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/the-shadow-aiceberg-what-security-teams-dont-see\/&#038;title=The%20Shadow%20AIceberg%20%20What%20Security%20Teams%20Don&#8217;t%20See\"\n            target=\"_blank\"\n            rel=\"noreferer noopener\"\n            class=\"wp-component-socials__link\"\n            title=\"Share on Linkedin\"\n        >\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#linkedin'><\/use>\n            <\/svg>        <\/a>\n    \n            <a\n            href=\"http:\/\/x.com\/share?text=The Shadow AIceberg  What Security Teams Don&#8217;t See&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/the-shadow-aiceberg-what-security-teams-dont-see\/\"\n            target=\"_blank\"\n            rel=\"noreferer noopener\"\n            class=\"wp-component-socials__link wp-component-socials__link--twitter\"\n            title=\"Share on Twitter\"\n        >\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#x'><\/use>\n            <\/svg>        <\/a>\n    \n    \n    <\/div>\n        <\/div>\n    <\/div>\n<\/section>\n                <\/div>\n                        <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-cards edwp-block wp-block-cards--col-3 layout--spacing-xxxl-top layout--spacing-xxxl-bottom\"\n    >\n    <div class=\"wp-block-cards__container\">\n        <div class=\"wp-component-content wp-component-content--default wp-block-cards__content\">\n            <h2 class=\"wp-component-heading text--h2 wp-component-content__title\">\n    Blog <span class=\"blue-text\">post<\/span><\/h2>                    <div class=\"wp-component-content__inner\">\n                                    <div class=\"wp-component-content__content wysiwyg\">\n                        <div class=\"wp-component-paragraph \">\n    <p>Read our latest blogs<\/p>\n<\/div>\n                    <\/div>\n                                                            <\/div>\n                <\/div>                                            <div class=\"wp-block-cards__cards row-load\">\n                    <div class=\"wp-component-card-insight wp-block-cards__card wp-component-card-insight--highlighted\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img loading=\"lazy\" decoding=\"async\" width=\"2048\" height=\"1366\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-0065-Elements.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"Two colleagues in a wood-panelled meeting room look at a wall screen displaying the WithSecure Elements security dashboard with trend charts for findings and scanned resources.\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-0065-Elements.jpg.webp 2048w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-0065-Elements-300x200.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-0065-Elements-1024x683.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-0065-Elements-768x512.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-0065-Elements-1536x1025.jpg.webp 1536w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-0065-Elements-447x298.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-0065-Elements-219x146.jpg.webp 219w\" sizes=\"auto, (max-width: 2048px) 100vw, 2048px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Blog<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Products<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">A critical PHP flaw is in the news. Here is what it means for your business.<\/h3>\n                                                    <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary btn--dark wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/a-critical-php-flaw-is-in-the-news-here-is-what-it-means-for-your-business\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight wp-block-cards__card\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img loading=\"lazy\" decoding=\"async\" width=\"2048\" height=\"1366\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3039.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"A woman with long red hair gestures while presenting beside a seated colleague, in front of a wall screen showing the WithSecure Elements Cloud architecture diagram.\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3039.jpg.webp 2048w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3039-300x200.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3039-1024x683.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3039-768x512.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3039-1536x1025.jpg.webp 1536w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3039-447x298.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3039-219x146.jpg.webp 219w\" sizes=\"auto, (max-width: 2048px) 100vw, 2048px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Blog<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Products<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">From panic to plan: exposure management for the next PHP<\/h3>\n                                                    <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/from-panic-to-plan-exposure-management-for-the-next-php\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight wp-block-cards__card\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img loading=\"lazy\" decoding=\"async\" width=\"2048\" height=\"1366\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-1148.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"A woman in a green cardigan gestures while talking with a colleague in an open-plan office, a coworker working at dual monitors in the background.\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-1148.jpg.webp 2048w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-1148-300x200.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-1148-1024x683.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-1148-768x512.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-1148-1536x1025.jpg.webp 1536w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-1148-447x298.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-1148-219x146.jpg.webp 219w\" sizes=\"auto, (max-width: 2048px) 100vw, 2048px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Blog<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Products<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">72 hours of PHP2Shell: what MSPs learned<\/h3>\n                                                    <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/72-hours-of-php2shell-what-msps-learned\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div>                <\/div>\n                                                <\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"<p> Most security teams can already see the AI tools they approved. What they can&#8217;t see is everything beneath that: personal AI assistants employees bring to work, AI browser extensions quietly requesting broad permissions, AI agents operating under their own unmanaged credentials, and GenAI features embedded inside everyday SaaS apps. <\/p>\n","protected":false},"author":20,"featured_media":13826,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[428,273],"tags":[],"content_type":[],"class_list":["post-14214","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai","category-ai-security"],"acf":[],"card":"<div class=\"wp-component-card-insight js-card-link wp-component-card-insight--highlighted\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img width=\"1920\" height=\"1080\" src=\"https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg\" class=\"wp-component-card-insight__image\" alt=\"AI Security hero image with iceberg\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg 1920w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-300x169.jpg 300w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1024x576.jpg 1024w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-768x432.jpg 768w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1536x864.jpg 1536w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-447x251.jpg 447w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-700x394.jpg 700w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-260x146.jpg 260w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Blog<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">AI<\/span>\n                                            <span class=\"wp-component-card-insight__category\">AI Security<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">The Shadow AIceberg  What Security Teams Don&#8217;t See<\/h3>\n                                            <p class=\"wp-component-card-insight__desc\"> Most security teams can already see the AI tools they approved. What they can&#039;t see is everything beneath that: personal AI assistants employees bring to work, AI browser extensions quietly requesting broad permissions, AI agents operating under their own unmanaged credentials, and GenAI features embedded inside everyday SaaS apps. <\/p>\n                            <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary btn--dark wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/the-shadow-aiceberg-what-security-teams-dont-see\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div>","_links":{"self":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/posts\/14214","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/comments?post=14214"}],"version-history":[{"count":3,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/posts\/14214\/revisions"}],"predecessor-version":[{"id":14217,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/posts\/14214\/revisions\/14217"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/media\/13826"}],"wp:attachment":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/media?parent=14214"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/categories?post=14214"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/tags?post=14214"},{"taxonomy":"content_type","embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/content_type?post=14214"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}