Orca adds discovery for shadow AI apps and agents
Agentless scanning looks for builder fingerprints and maps agent permissions, credentials and access to sensitive cloud data.
Stories per day · 30 days
7 RSS
Relatedai-agents6mcp6ai-governance4data-leakage4bitdefender2governance2llm-agents2phishing2prompt-injection2survey2access-control1agent-security1ai-security1autonomous-response1awareness-training1behavioral-analytics1chatgpt1clickfix1
54 stories, newest first · one card per story
Stories tagged #shadow-ai
Paper tests Agent Detector for unsanctioned LLM agents on Windows
On a small controlled bench it caught every synthetic agent in most runs while two behaviour-only rules flagged every twin.
Companies Increase AI Governance Spending
74.5% of respondents report larger cybersecurity budgets, with AI security and governance as the top priority.
Dark Reading offers nine habits for current workplace cyber risks
A reader poll put phishing at 39.1% and shadow AI at 38.2% as the top awareness challenges.
Wiz survey: 83% of firms lack a full AI asset inventory
Of 100 security leaders, 55% run autonomous agents and 52% found unauthorized AI apps in the past year.
VikingCloud launches AI Governance Services with shadow AI discovery and readiness scoring
The service line offers a 3-week AI Health Check with a 0-100 index and a 4-6 week assessment mapped to ISO/IEC 42001, NIST AI RMF and the EU AI Act.
1
DNSFilter launches LUMINATE for DNS security and AI controls
The vendor says one agent and console cover shadow AI policy, remote users and devices that cannot run agents.
1
Exeon launches AgentGuard for shadow AI and autonomous agents
The product uses existing data sources, without extra agents, to flag data leakage and unexpected agent actions.
ThreatAware launches Dimension for governed security apps
Cited research says 77% of security teams used AI coding assistants to build internal tools in the past year.
LLM agent security depends more on data access than model guardrails
Concentric AI’s chief scientist says access limits, identities, and approval gates bound what agents can leak or do.
Security teams rank employee AI data use above AI-powered attacks
In O’Reilly’s September survey, 55% had seen AI-generated phishing, but only about a quarter called it a top concern.
Argus, an open-source agentic security platform, offers autonomous response
Self-hosted and MIT-licensed, Argus ships autonomous response and pentesting off until operators opt in.
2
Tenable describes how shadow AI spreads and how to contain it
IBM figures cited put shadow AI breach incidents at 43%, with an average cost of $5.39 million.
1
Bitdefender webinar casts unowned AI agents as an insider risk
The session cites endpoint research, including a malicious agent skill found in the wild, and argues for governed AI instead of bans.
Managers say AI makes evaluating employees harder, Monday.com survey finds
Of 1,700 directors surveyed, 94% were excited about AI, yet nearly half spend more time reviewing output.
Corelight field CTO urges human review before SOC agents act
Vince Stoffer says teams should watch shadow AI, least privilege, change audits, and network use of AI.
Employees using personal ChatGPT at work? Here's what IT admins need to do
NordLayer pitches AI Scout to block employees from pasting sensitive data into personal ChatGPT accounts.
Product Walkthrough: Bitdefender AI Visibility and Control
Bitdefender GravityZone AIVC inventories AI tools, agents, and MCP connectors on Windows endpoints without reading prompts.
3
The Hidden AI Security Risks Threatening Businesses
Executives outline business AI risks including prompt leaks, overpowered agents, shadow tools, and hiring fraud.
2
AI Usage Control: Why Employee AI Use Needs Its Own Category
Akamai says nearly half of enterprise AI usage goes through personal accounts and needs separate controls.
2
Recorded Future Introduces AI Infrastructure Indicator Lists, Strengthening AI Governance
Recorded Future launched indicator lists so security teams can monitor and control AI infrastructure traffic.
5
How to mitigate the risk from AI-generated apps built by your 'citizen coder' employees
Tenable outlines governance controls to reduce risk from employee-built AI workplace apps.
AppViewX Adds Shadow AI Visibility and a Runtime Kill Switch to Agent Identity Security
AppViewX expanded Agent Identity Security with shadow-AI discovery, an MCP gateway, and a runtime agent kill switch.
2
The quest for simplicity: Why SMBs want advanced protection without the complexity
ESET argues SMBs want advanced, simple cybersecurity and managed detection rather than more complex point tools.