InfoSecBulletin Cybersecurity for mankind
Major US banks have detected unauthorized access to customer accounts by third-party AI agents, with some systems taking actions beyond users’ instructions, Axios reported Thursday, citing sources.
Banks including Morgan Stanley, Bank of America, JPMorgan Chase and Wells Fargo are working to contain the risks posed by AI agents, which can perform tasks on behalf of users, according to the report.
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes
Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In
The growing use of such tools is creating security challenges for financial institutions struggling to distinguish between legitimate customers and automated systems accessing accounts with users’ login credentials.
Although customers may authorize AI assistants to access their accounts, such access can violate bank policies requiring account holders to log in themselves, the report said.
The issue has raised concerns among banking executives over the potential consequences of granting AI agents access to sensitive financial information and transaction capabilities.
Agents with permission to make purchases or transfer money could potentially carry out transactions that users did not intend, exposing customers and banks to financial and security risks.
In some cases, banks have also tracked AI agents contacting customer service call centers or appearing to initiate actions independently of user instructions, according to people familiar with the issue.
Reuters also reported citing axion but said “could not immediately verify the report”.
Sources:
axios.com
reuters.com
aa.com.tr
Related news:
8-Agent AI Framework Used to Compromise Gov’t Entities in Asia
Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In
