[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:eu-ai-act\u002Foverview":3},{"item":4,"lessons":16,"controls":66,"related":93},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"eu-ai-act","overview","AI Act","Artificial Intelligence Act (Regulation (EU) 2024\u002F1689)",20,"European Union","**What it asks for.** The AI Act is the EU regulation laying down harmonised rules on artificial intelligence. It takes a risk based approach: some practices are prohibited, high risk systems face detailed requirements on risk management, data, documentation, transparency, human oversight, accuracy, robustness and cybersecurity, certain systems have transparency duties, and general purpose AI models have their own obligations. Obligations apply in phases.\n\n**In practice.** Organisations should inventory their AI systems, determine their role as provider or deployer, classify each system by risk category and plan compliance for the applicable obligations. Governance, AI literacy and documentation are central. Evidence includes the AI inventory, classification decisions, conformity documentation for high risk systems and supplier information.\n\n**Common gaps.** Many organisations have no inventory of AI in use, including AI embedded in purchased products. Deployer obligations are often overlooked on the assumption that compliance is the vendor's problem.",null,"https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2024\u002F1689\u002Foj","Read the AI Act on EUR-Lex","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"ai-bot-streaming-fraud-exposes-platform-detection-gaps","AI Bot Streaming Fraud Exposes Platform Detection Gaps","2026-10-07T12:20:57.58+00:00",{"slug":23,"title":24,"published_at":25},"openai-halts-gpt-61-launch-after-safety-testing-reveals-deceptive-behavior","OpenAI Halts GPT-6.1 Launch After Safety Testing Reveals Deceptive Behavior","2026-09-29T12:21:24.365+00:00",{"slug":27,"title":28,"published_at":29},"eu-warns-of-ai-powered-cyber-threats-and-moves-to-regulate-social-media-risks","EU Warns of AI-Powered Cyber Threats and Moves to Regulate Social Media Risks","2026-09-16T16:20:36.656+00:00",{"slug":31,"title":32,"published_at":33},"ai-misalignment-poses-existential-risk-without-governance-controls","AI Misalignment Poses Existential Risk Without Governance Controls","2026-09-14T14:20:53.586+00:00",{"slug":35,"title":36,"published_at":37},"ai-agent-attack-on-hugging-face-triggers-senate-investigation-into-openai-transparency","AI Agent Attack on Hugging Face Triggers Senate Investigation into OpenAI Transparency","2026-09-10T20:20:24.855+00:00",{"slug":39,"title":40,"published_at":41},"clearview-ais-inquiryiq-raises-mass-surveillance-and-privacy-risk-concerns","Clearview AI's InquiryIQ Raises Mass Surveillance and Privacy Risk Concerns","2026-09-10T12:22:00.455+00:00",{"slug":43,"title":44,"published_at":45},"nvidias-hugging-face-acquisition-raises-open-source-ai-security-concerns","Nvidia's Hugging Face Acquisition Raises Open-Source AI Security Concerns","2026-09-04T14:21:53.756+00:00",{"slug":47,"title":48,"published_at":49},"flock-safetys-ai-cop-search-tool-logs-abuse-but-doesnt-stop-it","Flock Safety's AI Cop Search Tool Logs Abuse But Doesn't Stop It","2026-09-03T13:20:38.197+00:00",{"slug":51,"title":52,"published_at":53},"industry-leaders-urge-ai-powered-cyber-defense-before-threat-window-closes","Industry Leaders Urge AI-Powered Cyber Defense Before Threat Window Closes","2026-08-27T20:20:54.127+00:00",{"slug":55,"title":56,"published_at":57},"metas-ad-platform-promoted-ai-deepfake-nudification-tool-targeting-politicians","Meta's Ad Platform Promoted AI Deepfake Nudification Tool Targeting Politicians","2026-08-18T16:21:27.919+00:00",{"slug":59,"title":60,"published_at":61},"anthropic-introduces-global-ai-watermarking-to-meet-eu-content-identification-rules","Anthropic Introduces Global AI Watermarking to Meet EU Content Identification Rules","2026-08-15T00:20:20.01+00:00",{"slug":63,"title":64,"published_at":65},"ai-model-with-reduced-safeguards-raises-dual-use-exploit-development-concerns","AI Model with Reduced Safeguards Raises Dual-Use Exploit Development Concerns","2026-08-11T14:21:15.821+00:00",[67,72,77,81,85,89],{"slug":68,"name":69,"problem":70,"stories":71},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",6,{"slug":73,"name":74,"problem":75,"stories":76},"breach-attack-simulation","Breach and attack simulation","You only find out whether your security tools stop an attack when a real attacker tries.",1,{"slug":78,"name":79,"problem":80,"stories":76},"compliance-automation","Compliance automation (GRC)","Evidence for NIS2, DORA and ISO 27001 is collected continuously, not in a rush before the audit.",{"slug":82,"name":83,"problem":84,"stories":76},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":86,"name":87,"problem":88,"stories":76},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",{"slug":90,"name":91,"problem":92,"stories":76},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[94,99,103,109,115,119,124,128],{"family":95,"item":6,"code":96,"title":97,"together":98},"nist-ai-rmf","AI RMF 1.0","AI Risk Management Framework (AI RMF 1.0)",19,{"family":100,"item":6,"code":101,"title":101,"together":102},"itil","ITIL",13,{"family":104,"item":105,"code":106,"title":107,"together":108},"iso","42001","ISO\u002FIEC 42001","ISO\u002FIEC 42001: Artificial intelligence management system",12,{"family":110,"item":111,"code":112,"title":113,"together":114},"gdpr","22","Article 22","Automated individual decision-making, including profiling",7,{"family":110,"item":116,"code":117,"title":118,"together":114},"5","Article 5(1)(f)","Principles relating to processing of personal data",{"family":120,"item":121,"code":122,"title":123,"together":71},"cis","14","Control 14","Security Awareness and Skills Training",{"family":120,"item":125,"code":126,"title":127,"together":71},"3","Control 3","Data Protection",{"family":120,"item":129,"code":130,"title":131,"together":71},"8","Control 8","Audit Log Management"]