Loading story…
Organizations adopting artificial intelligence face mounting governance challenges, including the proliferation of unapproved 'shadow AI' tools, regulatory uncertainty, and the emergence of new risk management mechanisms. Shadow AI, where employees use unsanctioned models and tools, is responsible for a significant portion of data breaches and exposes sensitive information, as many official governance programs fail to keep pace with the speed and ease of unauthorized AI adoption. At the same time, regulatory frameworks such as the EU’s AI Act are being developed to address risks like data leaks, inaccuracies, and compliance blind spots, creating a complex environment for digital leaders who must balance innovation with strict oversight.
In response to these risks, the insurance industry is beginning to develop specialized products to cover AI-related liabilities, with both established insurers and startups entering the market. The effectiveness of these insurance solutions in promoting safer AI practices remains debated, but there is potential for insurers to drive improved risk management if the market matures appropriately. The convergence of shadow AI risks, evolving regulations, and the nascent AI insurance market underscores the urgent need for organizations to implement robust, automated governance strategies that enable innovation while protecting sensitive data and ensuring compliance.
Track how attackers are adapting to this technology.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
Follow how adversaries are adapting to this technology, and where it touches your stack today.
3 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Enterprises are rapidly integrating artificial intelligence (AI) into their core operations, leading to a significant increase in both the scale and complexity of cybersecurity risks. Autonomous AI agents, once limited to providing suggestions, now act independently within enterprise systems, accessing sensitive data, executing transactions, and triggering downstream workflows without human oversight. These agents, often deployed by individual teams or embedded in third-party software, can inadvertently ingest confidential information, such as customer credit card data, even if the data is only briefly accessible. Unlike human users, AI agents lack contextual understanding and ethical judgment, acting continuously and at scale, which introduces a new category of 'Shadow AI' risk. Multimodal AI systems, which process multiple input streams to generate more human-like outputs, further expand the attack surface. Adversaries can exploit these systems by manipulating data inputs, such as subtly altering images or text, to deceive the AI and bypass security controls. Research has demonstrated that these attacks are not merely theoretical; adversarial manipulations can evade detection and cause significant harm, especially in critical sectors like defense, healthcare, and finance. Organizations are increasingly aware of the dangers posed by AI-augmented threats, including deepfakes and AI-driven social engineering, but many lag in implementing effective technical defenses. Surveys indicate that while a majority of firms have experienced deepfake or AI-voice fraud attempts, more than half have suffered financial losses as a result. Despite this, investment in detection and mitigation technologies remains inadequate, and many companies overestimate their preparedness. The surge in AI adoption is reflected in corporate disclosures, with over 70% of S&P 500 firms now reporting AI as a material risk, up from just 12% two years prior. Reputational and cybersecurity risks are the most frequently cited concerns, followed by legal and regulatory challenges as governments move to establish AI-specific compliance requirements. However, only a minority of corporate boards have formally integrated AI oversight into their governance structures, highlighting a gap between risk awareness and actionable governance. The lack of comprehensive frameworks for managing AI risk leaves organizations vulnerable to both technical and compliance failures. As AI becomes more deeply embedded in business processes, the need for robust governance, continuous education, and responsible-use frameworks becomes increasingly urgent. Security and governance leaders must adapt to this new frontier by developing strategies that address the unique risks posed by autonomous and multimodal AI systems. Failure to do so could result in significant financial, operational, and reputational damage as adversaries continue to exploit the evolving AI landscape.
Jun 29, 2026
Major insurers are moving to limit their exposure to artificial intelligence (AI) failures after a series of costly and highly publicized incidents, including defamation lawsuits, financial losses from AI-generated errors, and sophisticated scams leveraging AI technologies. Insurers such as AIG, WR Berkley, and Great American are seeking regulatory approval to exclude AI-related claims from corporate policies, citing the unpredictable nature of large language models and the difficulty in quantifying liability. These moves come as enterprises rapidly adopt generative AI tools, leading to expensive mistakes and raising concerns about systemic, correlated losses that traditional underwriting cannot easily address. Industry experts warn that the lack of clear causation between AI outputs and real-world consequences, combined with slow-moving legislation, has delayed a maturity leap in enterprise AI governance. However, the growing frequency and impact of AI-driven failures are expected to force a reset in enterprise expectations and risk management practices. As the hype around AI continues to outpace regulatory and oversight mechanisms, companies may soon face an overcorrection in how they balance model performance, safety constraints, and business speed, with insurers and regulators playing a pivotal role in shaping the future of AI risk management.
Jun 29, 2026
Enterprises are facing a critical inflection point as artificial intelligence becomes deeply embedded across organizational layers, fundamentally altering cyber risk and security postures. Research from industry leaders and the Cloud Security Alliance highlights that mature governance frameworks are now the primary differentiator for organizations confident in their ability to secure AI systems. As AI agents and machine identities proliferate, traditional identity and access management models are proving inadequate, with identity emerging as the new control plane for managing AI risk. The rapid adoption of AI, often without sufficient oversight, is creating new blind spots, expanding attack surfaces, and introducing risks such as shadow AI, where unsanctioned tools and agents operate outside established security controls. Security teams are increasingly involved in AI adoption, leveraging AI for detection, investigation, and response, but the lack of comprehensive governance and workforce training remains a significant barrier. The convergence of AI with other technologies, such as blockchain and cryptocurrency, is also driving the emergence of autonomous financial systems and agentic payments, further complicating the security landscape. Success in this new paradigm requires balancing innovation with robust accountability, ensuring that AI-driven systems are auditable and governed rather than left to unconstrained automation. As organizations move from experimentation to operational deployment of AI, the need for continuous, data-aware identity security and formal governance policies is paramount to mitigate risks, ensure compliance, and maintain confidence in AI-enabled operations.
Jun 29, 2026