Total Recon: How We Discovered 1000s of Open Agents in the Wild

Roey Ben Chaim, Staff Engineer, Zenity & Avishai Efrat, Senior Security Researcher, Zenity, speak at [un]prompted 2026 on: Total Recon: How We Discovered 1000s of Open Agents in the Wild. AI agents quietly created a new external attack surface: copi...

Roey Ben Chaim, Staff Engineer, Zenity & Avishai Efrat, Senior Security Researcher, Zenity, speak at [un]prompted 2026 on: Total Recon: How We Discovered 1000s of Open Agents in the Wild.

AI agents quietly created a new external attack surface: copilots, custom agents, AI middleware and various deployments that ship to the internet - often without anyone realizing they are reachable, enumerable, or over-permissioned. In this talk we’ll show how attackers can already find your agents in the wild, shedding light on the technical details that enable this kind of malicious activity - including how we used these details to find 1000s of exposed agents. We’ll follow up with explaining how to measure exposure, see the proof for obscurity failing, and understand how to detect threat-actor agent-focused recon before it turns into an impactful attack. Capping it all off by dropping PowerPwn - a recon tool you can use to test your own exposure.