Bankinfosecurity Enterprises Struggle with AI Governance Amid Rising Shadow AI Usage
Article Content
- •Only 18% of enterprises have a complete AI inventory.
- •47% of GenAI users still rely on personal AI applications.
- •Flexera provides a 10-step framework for AI governance.
As AI adoption accelerates, only 18% of enterprises maintain a complete AI inventory, according to IBM. Netskope found that 47% of enterprise GenAI users are still utilizing personal AI applications, leading to significant visibility gaps for security teams. The rapid spread of shadow AI complicates governance, as employees often bypass IT controls to use AI tools freely. This situation poses risks to data security and compliance, especially as AI tools can handle sensitive information. The Flexera article outlines a 10-step AI governance framework to help organizations regain control over AI usage. The urgency for effective governance is underscored by the growing prevalence of unsanctioned AI use within enterprises.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track CVE-2025-32711 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What percentage of enterprises have a complete AI inventory?
What is shadow AI?
What framework does Flexera suggest for AI governance?
Continue Reading
Emerging Threats from AI-Generated Content Exfiltration A new tool called `exfil-scan` has been developed to detect data exfiltration signals in outputs from large language models (LLMs) and AI-generated content. This tool addresses vulnerabilities highlighted by the EchoLeak attack family, particularly CVE-2025-32711, which demonstrated how hidden payloads could be…
Critical Zero-Day Exploits Target F5 and Check Point Products F5 Networks released emergency hotfixes for a critical zero-day vulnerability, CVE-2026-94127, in its BIG-IP Access Policy Manager on September 22, 2026, after confirming active exploitation. This flaw allows unauthenticated remote code execution (RCE) and has a CVSS score of 9.8. Concurrently, Check Point disclosed…