Healthcare can’t govern the AI tools it hasn’t found yet
93% of healthcare leaders report real patient data reaching AI coding assistants during development, with seven in ten using such tools without IT awareness.
Stories per day · 30 days
2 RSS
8 stories, newest first · one card per story
Stories tagged #shadow-it
Tines argues employee-built AI workflows need runtime controls
The piece says education, sandboxes, and committees do not govern credentials, data access, or orphaned workflows after they go live.
Bring Your Own Agent: Your Employees' Assistants Are Already Logged In
Employees are linking personal AI agents to corporate apps through OAuth, passwords, and API tokens, creating unmanaged identity risk.
Reducing shadow IT visibility gaps with Wazuh
Wazuh inventory and agent-status views help teams find unmanaged endpoints and unapproved software.
Beware these fake websites selling subscriptions to AI assistants
Malwarebytes found fake sites selling AI assistant subscriptions that can bill cards and collect uploaded files.
2
NCSC Warns Shadow AI Creates New Security Risks
UK NCSC warns that unapproved AI tools used by 71% of UK employees expose corporate data and create hard-to-detect organizational security risks.
The hidden risks of shadow AI
UK NCSC guidance warns shadow AI use by employees risks data exposure, lost data control, and attacker exploitation of vulnerable AI agents.
1
How Cloudflare detects MCP traffic and helps secure it
Cloudflare Gateway now detects Model Context Protocol traffic via protocol-level heuristics to expose shadow MCP usage and enforce approved-server access.