The moment you gave your AI agent access to email, files, and SaaS tools, you also handed attackers a new way in. Not through your firewall. Through your agent's eagerness to please.

That's the core of a new attack pattern researchers are calling LOTA — Living off the Agent .

What LOTL was, what LOTA is

Traditional attackers used living off the land (LOTL) tactics: gain a foothold, stay quiet, use the victim's own tools to move laterally. The attacker needed patience, skill, and time.

LOTA is faster and cheaper. Instead of exploiting the infrastructure, attackers exploit the agent . They send a crafted email, a prompt, or a message through a shared SaaS tool.…