ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “ai adoption”

390 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllVulnerability 675Ransomware 469Policy & legal 462Industry 454Exploit / PoC 402Phishing & fraud 272Data breach 262Malware 208AI safety & security 191Threat actor 180AI tools & infra 76AI industry 73AI policy 53Tools 45
SeverityAllcritical 1915high 518medium 548low 588info 394

How to Secure Enterprise AI: From Adoption to Incident Readiness

Sygnia-backed guidance urges a lifecycle approach to enterprise AI security, citing survey data that AI adoption is outpacing governance and incident readiness.

The Hacker News published Sygnia-sponsored guidance on securing enterprise AI across its lifecycle, from use-case definition and vendor selection to deployment and incident readiness. It cites Sygnia's 2026 CISO survey of 600 senior leaders: 63% expect AI fully embedded by 2027, 73% say their organization would not be fully ready for a significant cyberattack, and 67% of executives believe unapproved AI tools already caused a breach. The piece highlights shadow AI, ad hoc integrations, and over-permissioned AI agents as key attack surface risks, noting only 38% of organizations report a comprehensive AI policy.

The Hacker News · 14d agoAI safety & security

When the Whole Company Adopts AI: What It Does to Your SOC

Analysis of 16.9 million SOC alerts finds AI-related alerts at 0.43%, growing 685% since February, with 94.1% noise and 0.02% real attacks.

A review of roughly 16.9 million SOC alerts found about 73,000 (0.43%) were AI-related, a share that grew 685% between February and June 2026. Of AI-related alerts, 94.1% were noise, 5.8% genuine risks, and 0.02% real attacks; 79.8% received benign verdicts, 81.7% were automatically suppressed, and only 5.4% reached a human analyst. The only confirmed attacks were phishing campaigns that weaponized AI brand names as lures, while developer coding agents spawning shells and reading credential stores routinely tripped detections written before AI agents existed.

The Hacker News · 4d agoResearch2

Pilot Early, Commit Late: A Real-Options Model of Enterprise AI Adoption under Rapid Technological Progress

Real-options model shows firms should pilot AI early and commit late because rapid frontier progress raises experimentation value over irreversible deployment.

The paper builds a two-period decision model where firms choose among immediate AI deployment, a limited pilot, or waiting under frontier uncertainty. It derives five timing results plus a comparative result on where learning occurs, including that frontier uncertainty raises the value of waiting and piloting. Valuable organization-specific learning creates a region where 'pilot early, commit late' is optimal, and a closed-form modularity threshold exists above which immediate deployment dominates. A continuous-time extension recovers the standard result that uncertainty raises adoption thresholds while capability and modularity lower them.

arXiv cs.AI / cs.LG / cs.CL · 2d agoAI research

AI adoption brings new security headaches for already stretched CISOs

Proofpoint's 2026 Voice of the CISO report finds 79% of CISOs must manage AI-related risks without added resources or expertise.

Proofpoint's 2026 Voice of the CISO report says AI governance is expanding CISO responsibilities faster than resources, with 79% expected to manage AI-related risks without proportional support. Seventy-eight percent of CISOs consider GenAI a security risk, chiefly customer data loss through public AI platforms, and 61% expect a targeted attack within 12 months, down from 76% in 2025. Human risk remains the top vulnerability for 79% of respondents, and 93% of organizations with material data loss said departing employees played a role. Cloud account takeover now tops perceived threats, while email fraud, ransomware and malware declined in the rankings.

Help Net Security · 7d agoIndustry

New insights from Google’s AI & Economy ATLAS

Google launches an interactive AI & Economy ATLAS experience; new research shows nearly half of surveyed scientists use AI daily.

Google introduced new interactive, open-access data visualizations for its AI & Economy ATLAS project tracking global AI adoption patterns. Research from Google, Google DeepMind, and MIT FutureTech analyzed 2,600 specialized AI models and surveyed over 600 U.S. and U.K. scientists, finding nearly half use AI daily and report saving almost seven hours per week. The study also found validation bottlenecks and a growing backlog of untested hypotheses limiting research productivity gains.

Google · AI · 1d agoAI industry

When companies get specific about AI, revenue growth looks different

A Carnegie Mellon and Larridin study of 564 companies links specific AI disclosures to 8 points higher revenue growth, not margins.

Researchers at Carnegie Mellon University and Larridin analyzed 564 companies across 12 sectors using 478 10-K filings, more than 30,000 classified job postings and an AI maturity tracker. Companies at the top of 'narrative concreteness', meaning they named deployed AI systems with measurable outcomes, were associated with 8.0 percentage points higher year-over-year revenue growth, while no public AI signal predicted operating margins or risk-adjusted stock returns. AI infrastructure suppliers outperformed matched peers by about 32 percentage points over four months. The authors stress the findings show association, not causation.

Help Net Security · Aug 17, 2026AI industry

Shadow AI in Financial Services | Risk & Governance

Huntress warns financial services firms that unsanctioned 'Shadow AI' tool use creates data leakage and compliance risks faster than governance controls can keep pace.

Huntress argues Shadow AI — employee use of unapproved AI tools such as ChatGPT and Microsoft Copilot — is spreading across financial services faster than visibility and controls. Uploading regulated customer data into public generative models risks breaches of client confidentiality, data protection rules, and market conduct obligations. The piece recommends secure web gateways, DNS filtering, DLP, application allowlisting, and corporate SSO/MFA for approved tools rather than outright bans, which can push usage onto personal devices.

Huntress · 13d agoIndustry

Underwriting Superintelligence: Backing Agents you can Sue — Rune Kvist, AIUC

AIUC raised a $40 million Series A to build AIUC-1, an agent security standard backed by insurance, serving Cursor, Harvey, Lovable, and ElevenLabs.

AIUC, cofounded by former Anthropic product hire Rune Kvist, announced a $40 million Series A led by Ribbit Capital and First Harmonic. The startup builds AIUC-1, an emerging standard for agent security, safety, and reliability, stress-testing agents for jailbreaks, hallucinations, and data leaks. It pairs standards with insurance underwriting through Lloyd's of London and counts Cursor, Harvey, Lovable, and ElevenLabs among its customers. Kvist argues trust and liability, not capability, are becoming the binding constraint on AI adoption.

Latent Space · 14h agoAI industry 2 sources

Deloitte strengthens AI governance to support trusted enterprise adoption

Deloitte expanded AI Controls and Assurance services to close governance gaps, noting only 21% of firms have mature agentic AI governance.

Deloitte announced expanded AI Controls and Assurance services spanning AI governance frameworks, risk assessments, model validations, AI-enabled internal audit, ecosystem integration with hyperscalers, and regulatory readiness including SOC reporting. The launch cites Deloitte's State of AI in the Enterprise finding that 74% of companies plan to deploy agentic AI within two years while only 21% report mature governance for autonomous agents. The offerings align with Deloitte's Trustworthy AI framework and target the AI lifecycle from exploration to enterprise-scale deployment.

Help Net Security · Aug 12, 2026AI industry

AI spend per employee slumped at top firms in August — summer doldrums or a warning sign?

Ramp data across 70,000 companies shows August AI adoption grew just 0.4% while per-employee spend at top-spending firms fell nearly 10% to $7,205 amid declining token prices.

Ramp's spending data shows 56% of its customers paid for AI products in August, up only 0.4% month-over-month, with spend per employee in the top 1% of firms down almost 10% to $7,205. Average token costs have dropped to $0.68 per million tokens from a 2026 peak of $1.15 in March after price cuts by OpenAI and Anthropic, and the labs have not yet offset the cuts with volume, with customers shifting to cheaper models like ChatGPT 5.6-Terra and Claude Sonnet. The US Census Bureau's broader survey shows only 22% of businesses report using AI, suggesting Ramp's tech-heavy client base overstates adoption, while only 6.4% of AI-spending businesses used model-serving or inference platforms in August.

TechCrunch · AI · 7d agoAI industry

The hardest part of agentic AI may be rebuilding the business

Deloitte survey finds most organizations' business processes and workforces unprepared for agentic AI adoption.

Deloitte research reports that only 16% of leaders say their business processes are ready for agentic AI, with 46% reporting readiness even among organizations that have deployed agents at scale. Key blockers include fragmented data foundations, limited trust and governance, and integration cost and complexity. About 43% of leaders expect significant job disruption within 12 to 18 months, while 71% report providing baseline AI-agent literacy training. Roughly 31% expect at least half of business processes redesigned around agents within two years, rising to 74% within four years.

Help Net Security · Aug 14, 2026AI industry

Orchid Security targets AI agent risk with drift detection and kill switches

Orchid Security launched identity drift detection and application-level kill switches to govern AI agents that exploit enterprise identity debt.

Orchid Security announced AI readiness controls including agent discovery, continuous drift detection between an agent's intended purpose and observed behavior, and application-level kill switches that revoke credentials, disconnect tools, or suspend agent workflows. The company cites its Identity Gap 2026 finding that 57% of enterprise identity is unseen and unmanaged, which agents can leverage to gain elevated access in seconds to minutes. New integrations include a certified PAM integration for Palo Alto Networks Idira and identity telemetry streaming to Splunk Enterprise Security. The launch follows agentic enhancements to Orchid's Identity Control Plane in May 2026 and cites NIST's draft Cyber AI Profile and DORA as regulatory drivers.

Help Net Security · 7d agoAI safety & security

Cyberthreats are moving faster than SMBs: Readiness must accelerate

ESET's SMB Cyber Readiness Index 2026 finds 73% of SMBs adopting AI while 40% lack AI policy, and reports 3,000+ malicious AI agent skills.

ESET argues AI is accelerating cyberthreats while expanding the attack surface: its SMB Cyber Readiness Index 2026 found 73% of SMBs integrating AI and 40% of businesses lacking a proper AI policy. ESET analyzed 900,000 AI agent skills across popular repositories between March and May 2026, finding over 25,000 suspicious and more than 3,000 malicious skills that exfiltrate data, execute malware, or abuse prompt injection. The piece also cites AI-assisted reconnaissance, exploit development, and social engineering, plus PromptSpy, an Android spyware abusing Google Gemini at runtime for persistence.

ESET WeLiveSecurity · 23h agoIndustry

ScienceLogic delivers secure AI deployment and smarter IT operations with Skylar AI 2.5

ScienceLogic shipped Skylar AI 2.5 with sovereign, on-premises, and secure-cloud deployment options and expanded AIOps integrations for regulated industries.

ScienceLogic announced Skylar AI 2.5, the intelligence layer of its AIOps platform, adding sovereign cloud, on-premises, and secure cloud deployment options for organizations with strict security, sovereignty, and compliance requirements. The release improves advisory accuracy, analytics and dashboards, AI governance controls such as agent monitoring and token-usage tracking, and integrations with Microsoft Teams and ServiceNow. It targets regulated industries adopting agentic AI, building on the company's FedRAMP Moderate authorization.

Help Net Security · Aug 12, 2026AI industry

Your employees are already using AI tools you never approved

OneTrust report: 74% of organizations have scaled AI adoption, but only 17% embed governance by design and agent use outpaces oversight.

OneTrust's 2026 AI-Ready Governance Report finds 74% of respondents report departmental or scaled AI adoption, yet only 17% report governance embedded by design and just 5% have coordination and accountability defined across the AI lifecycle. Nearly half experienced at least one incident in the past year where AI systems or agents took unapproved actions, with data loss, corruption, and misclassification cited as the most likely and least prepared-for risks. 33% say employees used unapproved AI tools because approved options were not available quickly enough, and 98% plan to increase AI governance technology budgets next financial year.

Help Net Security · 2d agoIndustry

Countering misuse of AI: September 2026 / Anthropic

Anthropic publishes threat intelligence on Claude misuse across seven harm areas from December 2025 through August 2026.

Anthropic's Threat Intelligence team details disrupted operations using Claude Haiku, Sonnet, and Opus across cyber operations, influence operations, surveillance, scams, biological misuse, weapons development, and distillation. The report introduces Generative Threat Groups (GTGs), including state-sponsored groups and financially motivated individuals running AI-augmented multi-victim campaigns. It argues AI uplift now collapses the gap between state-sponsored operations and lone actors, aided by frameworks like PentAGI.

Lobsters · securityupdated · 15h agofirst · 5d agoAI safety & security 20 sources1

Expanding OpenAI’s presence in Brazil

OpenAI announces expansion of its Brazil presence to engage developers, businesses and communities supporting local AI adoption.

OpenAI said it is expanding its presence in Brazil and deepening engagement with developers, businesses and communities to support AI adoption in the country. The announcement contains no product launches, funding figures, or infrastructure commitments. It signals a market expansion and local outreach effort in the Brazilian AI ecosystem.

OpenAI News · 21d agoAI industry

Ping Identity introduces enterprise security for personal AI agents

Ping Identity launched Enterprise Personal Agent Access to discover, authenticate and control personal AI agents like Claude at runtime.

Ping Identity announced Enterprise Personal Agent Access, delivered through PingOne Privilege, to give enterprises visibility and control over personal AI agents such as Claude and Claude Code. The product discovers agents including shadow AI, associates each session with the user and device behind it, and enforces allow, deny, log, human-approval or revocation decisions on agent access at runtime. It enables secretless developer workflows so agents can commit code without long-lived credentials while keeping actions attributable to the agent. Ping cites Gravitee research that 48% of production AI agents run unsecured and says the product is available now and piloting with global enterprises.

Help Net Security · 14d agoAI safety & security

The AI Malware Maturity Gap

Recorded Future introduces AIM3, a five-level maturity model for AI malware, showing current attacker AI use is mostly AI-assisted rather than autonomous.

Recorded Future proposes AIM3, a five-level model defining AI malware from LLM-translated to LLM-embedded, spanning experimentation to fully autonomous agentic campaigns. Public examples remain early-stage: PROMPTFLUX uses Google Gemini to rewrite its VBScript dropper (Level 1), while Lamehug/PROMPTSTEAL, attributed to APT28, invokes the HuggingFace API to generate reconnaissance commands (Level 3). The authors argue most current AI malware augments existing tradecraft rather than enabling one-click autonomous attacks.

Recorded Future · 22d agoResearch

From assistance to execution: How enterprises put AI to work

OpenAI reports enterprise adoption patterns of agentic AI through ChatGPT and Codex, with frontier firms pulling ahead in deployment.

OpenAI published a report on how enterprises are moving from AI assistance to autonomous execution, focusing on agentic AI deployments. It highlights the use of ChatGPT and Codex in enterprise workflows and argues that frontier firms are pulling ahead of peers in AI adoption. The piece is adoption research and marketing rather than a security disclosure.

OpenAI News · Aug 12, 2026AI industry1