[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f--Xwdnfyo0_f9RQYDAOs09vGBi1tKcjZGlKPhUALzo8":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":23,"status":24,"created_at":25,"published_at":26,"article":27,"tags":31,"podcasts":50,"controls":51},"01f60eb9-9c65-46bc-8d30-e375d22eb119","shadow-ai-on-endpoints-creates-hidden-risk-and-data-exposure","064b4680-0419-41eb-90c9-389560b9c883","Shadow AI on Endpoints Creates Hidden Risk and Data Exposure","Organizations are increasingly exposed to 'shadow AI' — unauthorized or untracked AI tools running on employee endpoints without IT oversight. These tools may silently transmit sensitive corporate data to external AI services, creating compliance and data leakage risks that traditional software inventories fail to detect. Without visibility into which AI applications, browser-based services, or local model runtimes are in use, security teams cannot assess or mitigate associated risks. The introduction of tools like Bitdefender's AIVC highlights a growing gap between AI adoption speed and organizational governance maturity. Unmanaged AI usage undermines data protection policies, access controls, and regulatory obligations.","**Immediate actions:**\n- Conduct an audit of all endpoints to identify AI tools, browser extensions, and local model runtimes currently in use.\n- Deploy an AI visibility solution or extend your existing endpoint management platform to inventory AI-related software and network connections.\n\n**Policy and governance improvements:**\n- Establish a formal AI usage policy that defines approved tools, acceptable data inputs, and required approval workflows before adoption.\n- Classify AI tools by risk tier (e.g., cloud-connected vs. local) and enforce data handling rules accordingly per tool category.\n- Integrate AI software discovery into your standard software asset management and change management processes.\n\n**Detection and monitoring measures:**\n- Implement continuous monitoring of endpoint-to-AI-service network traffic to detect unapproved external AI API calls.\n- Set up alerting for new or unrecognized AI application installations or browser-based AI service access on managed devices.\n- Log and review user activity associated with AI tools to identify potential data exfiltration or policy violations.",[12,13,14,15,16,17,18,19,20,21,22],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 13: Data Protection","CIS Control 8: Audit Log Management","NIST SP 800-53 CM-8: Information System Component Inventory","NIST SP 800-53 AC-4: Information Flow Enforcement","NIST SP 800-53 AU-2: Audit Events","NIST AI RMF: GOVERN 1.1 – Policies and Accountability for AI Risk","GDPR Article 32: Security of Processing","GDPR Article 25: Data Protection by Design and by Default","ISO\u002FIEC 27001 A.8.1: Responsibility for Assets","ITIL: Service Configuration Management",{},"published","2026-10-13T12:22:02.091438+00:00","2026-10-13T12:22:02.053+00:00",{"id":7,"url":28,"slug":29,"title":30},"https:\u002F\u002Fthehackernews.com\u002F2026\u002F10\u002Fproduct-walkthrough-bitdefender-ai.html","product-walkthrough-bitdefender-ai-visibility-and-control-47f53c","Product Walkthrough: Bitdefender AI Visibility and Control",[32,38,44],{"id":33,"name":34,"slug":35,"description":36,"color":37},"1732a005-556e-411c-a9db-5edec3058571","Logging & Monitoring","logging-monitoring","Missing logs, no alerting, blind spots","#a855f7",{"id":39,"name":40,"slug":41,"description":42,"color":43},"859cf0ad-a7e9-42bb-a75d-bac6511fa5d5","Configuration Management","configuration-management","Misconfigs, default credentials, exposed services","#eab308",{"id":45,"name":46,"slug":47,"description":48,"color":49},"c8b843a5-d5a7-41d1-8d3b-cabded09d2ef","Data Protection","data-protection","Unencrypted data, missing DLP, poor classification","#3b82f6",[],[52,56,60],{"slug":53,"name":54,"problem":55},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",{"slug":57,"name":58,"problem":59},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",{"slug":61,"name":62,"problem":63},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught."]