Tenable released its Cloud and AI Security Risk Report 2026, revealing that organizations are operating with virtually no margin for error as AI-driven exposure grows faster than risks can be mitigated. The study shows that rapid engineering velocity, fueled by AI adoption, third-party code, and expanding cloud environments, has surpassed the human capacity to properly assess, prioritize, and remediate vulnerabilities before attackers can exploit them.
The AI Exposure Gap is a largely invisible form of exposure that emerges across applications, infrastructure, identities, agents and data, and that most security teams are not equipped to manage. Tenable’s analysis of cloud environments identifies severe risks across four key security areas: AI security posture, supply chain attack vectors, least privilege implementation and cloud workload exposure — all of which demand immediate attention. The Cloud and AI Security Risk report 2026 includes actionable guidance for security and business leaders to reduce risk across cloud and AI environments.
Key findings from the Cloud and AI Security Risk Report 2026 include:
- 70% have integrated at least one AI or Model Context Protocol (MCP) third-party package, embedding AI deep into applications and infrastructure, often without central security oversight.
- 86% host third-party code packages with critical-severity vulnerabilities, making the software supply chain a primary and persistent source of cloud exposure. Furthermore, nearly 1 in 8 (13%) have deployed packages with a known history of compromise, such as the s1ngularity or Shai-Hulud worms.
- 18% of organizations have granted AI services administrative permissions that are rarely audited, creating a “pre-packaged” catalog of privileges for attackers to claim.
- Non‑human identities such as AI agents and service accounts now represent higher risk (52%) than human users (37%), forming “toxic combinations” of permissions and access that fragmented tools fail to connect.
- 65% possess “ghost” secrets—unused or unrotated cloud credentials—with 17% of these tied specifically to critical administrative privileges.
- 49% of identities with critical-severity excessive permissions are dormant.
“AI systems embedded in infrastructure pose a critical risk that CISOs and defenders must address, in addition to anticipating emerging threats from both AI and cloud technologies. Lack of visibility and governance means teams are at the mercy of new exposures, including over-privileged identities in the cloud,” said Liat Hayun, Senior Vice President of Product Management and Research at Tenable. “By focusing on the unified exposure path, organizations can stop managing ‘security debt’ and start managing actual business risk.”
To manage emerging risks, organizations must secure the AI integration process through comprehensive visibility and identity-centric controls. This includes enforcing least privilege for AI roles, neutralizing “ghost” identity risk and eliminating static secret exposure. Third-party code and external accounts are now extensions of organizations’ infrastructure; steps to reduce extended supply chain exposure include unifying visibility across code packages, virtual machines, identity access and cloud environments.
The 2026 Cloud & AI Security Risk Report 2026 presents findings from the Tenable Research team, analyzing anonymized telemetry from diverse public cloud and enterprise environments collected from April to October 2025 (AI findings extended through December 2025).
Exposure Management is the practice of identifying, evaluating, and prioritizing the risks posed by all entry points an attacker could exploit. This includes not just software vulnerabilities (CVEs), but also misconfigurations, excessive user privileges (identity risk), cloud security gaps, and the “shadow” assets created by AI and third-party supply chains.
Download the Tenable Cloud and AI Security Risk Report 2026 report here.
Related News:
Netwrix 2025 Cybersecurity Trends Report: AI Risks Reshape Security Plans
