InfoSecBulletin Cybersecurity for mankind
Major US banks have detected unauthorized access to customer accounts by third-party AI agents, with some systems taking actions beyond users’ instructions, Axios reported Thursday, citing sources.
Banks including Morgan Stanley, Bank of America, JPMorgan Chase and Wells Fargo are working to contain the risks posed by AI agents, which can perform tasks on behalf of users, according to the report.
Barracuda ESG flaws exploited, gaining root access
Apple, SAP, and Ivanti Patch Critical flaws Affecting Messaging, Bluetooth, and Enterprise Systems
Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom
Daily Cyber security update for 10.11. 2026
IBM fixes 208 API Connect vulnerabilities, 47 critical
89 New ransomware groups emerge in 2026, claiming over 2,200 victims
Daily Cyber security update for 08.11. 2026
Japan banking crisis
Outage causes disruption at 128 japan banks: preventing ATM transaction
Daily Cyber security update for 06.11. 2026
Cyber attack causes French bank Credit Mutuel Arkea €100 million missing
The growing use of such tools is creating security challenges for financial institutions struggling to distinguish between legitimate customers and automated systems accessing accounts with users’ login credentials.
Although customers may authorize AI assistants to access their accounts, such access can violate bank policies requiring account holders to log in themselves, the report said.
The issue has raised concerns among banking executives over the potential consequences of granting AI agents access to sensitive financial information and transaction capabilities.
Agents with permission to make purchases or transfer money could potentially carry out transactions that users did not intend, exposing customers and banks to financial and security risks.
In some cases, banks have also tracked AI agents contacting customer service call centers or appearing to initiate actions independently of user instructions, according to people familiar with the issue.
Reuters also reported citing axios but said “could not immediately verify the report”.
Sources:
axios.com
reuters.com
aa.com.tr
Related news:
8-Agent AI Framework Used to Compromise Gov’t Entities in Asia
Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In
