CYBERSECURITYTRACKER
Permanent story citation

The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 4906

As cited

Copy frozen at (site build).

ai security

The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk

Akamai research identifies that a small fraction of enterprise AI users, the top 5% power-adopters, pose disproportionate security risks by integrating unvetted AI tools directly into critical business operations. Security teams often focus on monitoring casual ChatGPT and Claude usage while overlooking this concentrated threat from users embedding these tools into core workflows.

Why it matters: Security practitioners need to shift monitoring from widespread low-risk AI adoption to identifying and controlling power-users integrating AI into critical systems, as misconfigurations or prompt injection attacks at that level could compromise essential business operations.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

ai security

The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk

No summary had been written when this copy was frozen.

First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

ai security

The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk

Akamai research highlights that a small subset of enterprise employees, the top 5% of artificial intelligence (AI) users, pose a significant security risk by integrating unvetted AI tools into critical business processes. These power users may bypass standard oversight, creating vulnerabilities in operations. Enterprise security teams often overlook this group while focusing on broader AI adoption.

Why it matters: Enterprise security teams should prioritize monitoring and vetting AI power users to prevent unchecked integration of tools that could expose critical operations to risk.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary