AI Connectors Expand Security Risks for Enterprises

Research by PromptArmor reveals that connecting AI agents like ChatGPT and Claude to external services significantly increases security risks. Over a six-week period, 37% of 2,517 connectors changed, with 1,686 new tools added and many tool descriptions rewritten. This rapid evolution can invalidate previous security assumptions regarding tool capabilities and access levels. For instance, the Dropbox connector expanded from eight to 24 tools, introducing new destructive capabilities. The study highlights that many connectors may call additional AI services, further complicating data security. Security teams may not be aware of these changes, leading to potential exposure of sensitive data. The findings suggest a growing concern for enterprises utilizing AI connectors in their operations.

Key Points: • 37% of AI connectors changed within six weeks, raising security concerns. • The Dropbox connector expanded from eight to 24 tools, including destructive ones. • Many connectors may invoke additional AI services, complicating data governance.