Story details
Rostec reported on 8 October that its RT-Information Security unit had created two detection and investigation packages for RT Protect EDR aimed at “shadow AI”: AI agents used on work computers without security-team oversight. The company says its software identifies whether such tools are present and tracks host actions such as commands being launched and files being accessed.
One package, “AI Agent Control,” links an agent’s activity to the user account and shows the data and commands it accesses; “Shadow AI” covers unauthorized clients, local models and connections to external services, according to the release. Rostec says its researchers examined how several AI tools run and access files and networks. The announcement describes vendor capabilities and reports no independent accuracy, false-positive or deployment results.