Infosecurity-Magazine Governance Gaps Lead to Sensitive Data Exposure via AI Tools
Article Content
- •47% of security leaders report sensitive data exposure via AI tools.
- •Only 56% of organizations have comprehensive technical controls for AI usage.
- •56% of security leaders say autonomous AI agents operate outside existing governance.
Research indicates that 47% of security leaders have faced sensitive data exposure through AI tools, with 77% of these incidents involving company-approved tools. A study by BlackFog reveals that while 98% of organizations have AI usage policies, only 56% have comprehensive technical controls to enforce them. Many organizations lack visibility into data shared with AI tools, with less than half able to track what data has been sent out. The governance gap is particularly pronounced for autonomous AI agents, with 56% of security leaders reporting these agents operate outside existing controls. The findings suggest a significant risk of data exposure, especially in industries like technology and telecoms, where 70% of respondents noted governance issues with AI agents.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Common questions
What percentage of organizations have AI usage policies?
How many security leaders can track data shared with AI tools?
What industries are most affected by AI governance gaps?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…