Browser agents: it isn't the password that exposes you, it's the session
The agent never has to steal a credential. It works inside a session that is already open, and your IAM cannot see it.
Shadow AI
The inventory nobody ran: how many AI agents are actually running in your organization
You cannot count a population whose members share credentials. The inventory problem is an identity problem first.