AI Agent Security: Whose Responsibility Is It?

This report discusses the security risks of deploying agentic AI, highlighting a recent critical vulnerability (ForcedLeak) in Salesforce Agentforce that could allow CRM data exfiltration, and emphasizes shared responsibility between vendors and customers to enforce access controls, secrets scanning, MFA, and architectural safeguards to prevent leaks and prompt-injection-based exposures.