[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUADZFWETEo-r3qhYMy1wvKO5vpL-3QBBgXpm00Z6mHM":3},{"article":4,"iocs":55,"watch_terms":56,"solutions":57,"lesson":144},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"2fb75c07-e03c-4b34-bafa-5e7dbf0707dc","Companies are spending more on AI governance and getting less control","companies-are-spending-more-on-ai-governance-and-getting-less-control-f3a356","Companies are increasing their cybersecurity budgets, with AI security and governance the top priority for additional spending, followed by cloud security, according to DNSFilter’s The Cost of Shadow AI report. Some 74.5% of respondents reported a larger cybersecurity budget than 12 months earlier. Asked where their next incremental security dollar would go, 40.3% named AI security and governance, followed by cloud security at 25.5%. One reason to prioritize it is that employees grant AI tools … More → The post Companies are spending more on AI governance and getting less control appeared first on Help Net Security.","A DNSFilter report reveals that companies are allocating more budget to AI security and governance, yet many struggle with visibility and control. Employees often connect AI tools to corporate systems without proper IT notification or approval, leading to security incidents and untracked costs. Network activity data suggests significantly higher AI tool usage than reported by IT departments, indicating a gap between governance spending and actual control.","Companies increase AI governance spending but struggle to maintain control over AI tool usage.","https:\u002F\u002Fwww.helpnetsecurity.com\u002F2026\u002F11\u002F05\u002Fdnsfilter-shadow-ai-cost-report\u002F","https:\u002F\u002Fimg.helpnetsecurity.com\u002Fwp-content\u002Fuploads\u002F2025\u002F07\u002F09154647\u002Fshadow_ai-1500.webp","2026-11-05T05:30:14+00:00","2026-11-05T06:00:20.654557+00:00",7,[17,20,23,25,28,30],{"name":18,"type":19},"DNSFilter","vendor",{"name":21,"type":22},"AI governance","technology",{"name":24,"type":22},"cloud security",{"name":26,"type":27},"Google Workspace","product",{"name":29,"type":27},"Microsoft 365",{"name":31,"type":22},"SSO","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":32,"icon":34,"name":35,"slug":36},null,"AI Security","ai-security",[38,40,45,50],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,26,29],{"controls":58,"vendors":138},[59,87,113],{"slug":60,"name":61,"problem":62,"products":63},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[64,72,80],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":82,"url":85,"description":86},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"slug":88,"name":89,"problem":90,"products":91},"saas-security-posture","SaaS security posture management (SSPM)","Business apps like Microsoft 365 and Salesforce stop leaking through risky settings and connected apps.",[92,99,105],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":94,"url":97,"description":98},"obsidian-security","Obsidian Security","\u002Fvendor-logos\u002Fobsidian-security.png","obsidian","https:\u002F\u002Fwww.obsidiansecurity.com\u002F","SaaS posture management and detection of account and integration compromise.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":100,"product_name":101,"url":103,"description":104},"appomni","AppOmni","\u002Fvendor-logos\u002Fappomni.png","https:\u002F\u002Fappomni.com\u002F","SaaS security posture management for platforms such as Salesforce, Microsoft 365 and ServiceNow.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-shield","Falcon Shield","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Ffalcon-shield\u002F","SaaS security posture management, from CrowdStrike's acquisition of Adaptive Shield.",{"slug":36,"name":114,"problem":115,"products":116},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[117,125,130],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":126,"product_name":127,"url":128,"description":129},"boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",[139],{"slug":140,"name":18,"logo_path":141,"roles":142},"dnsfilter","\u002Fvendor-logos\u002Fdnsfilter.png",[143],"reported_by",{"slug":145,"title":146,"body":147,"framework_refs":148,"framework_notes":156},"ai-tool-sprawl-exposes-gap-between-governance-spending-and-actual-control","AI Tool Sprawl Exposes Gap Between Governance Spending and Actual Control","Despite increased investment in AI governance, organizations are losing visibility into which AI tools employees are connecting to corporate systems, creating a classic shadow IT problem at scale. Employees are bypassing IT approval processes and integrating unauthorized AI services directly into corporate environments, exposing sensitive data and creating untracked costs and risks. Network activity consistently shows far greater AI tool usage than IT departments are aware of, meaning governance frameworks exist on paper but are not enforced in practice. This matters because unvetted AI tools may exfiltrate sensitive data, violate compliance obligations, or introduce vulnerabilities that security teams cannot see or manage.",[149,150,151,152,153,154,155],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 14: Security Awareness and Skills Training","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","GDPR Article 32","NIS2 Article 21(2)(b)",{"GDPR Article 32":157,"NIS2 Article 21(2)(b)":158,"NIST SP 800-53 SI-2: Flaw Remediation":159,"CIS Control 14: Security Awareness and Skills Training":160,"CIS Control 2: Inventory and Control of Software Assets":161,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":162,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":163},"Unauthorized AI tools may process personal data without appropriate safeguards, directly violating the obligation to implement appropriate technical and organizational security measures.","NIS2 requires incident handling and risk management controls over ICT assets; shadow AI tool usage undermines both asset visibility and the ability to respond effectively to incidents involving those tools.","A structured software management program, as required here, would include processes for identifying and governing all software in use, preventing uncontrolled AI tool adoption.","Staff are bypassing governance processes, indicating they lack awareness of the risks and policies around connecting unapproved AI tools to corporate systems.","Employees are deploying AI tools without IT knowledge; maintaining an authoritative software inventory would surface unauthorized tools and require approval before use.","Unvetted AI tools represent unassessed technical risk; this control requires organizations to maintain visibility and control over software assets to manage associated vulnerabilities.","Proper access control policies would restrict employees from integrating external AI services into corporate environments without prior authorization and vetting."]