CrowdStrike told its own conference last week that one customer had approved 300 AI agents. Its new scanner found 18,000 of them running on staff computers, most never cleared by anyone. The firm would not say how many of the extra 17,700 were installed without permission.