Tag
6 articles tagged Risk Management.
AI Security
Storm-0940 did not need a single user password: it signed in as a trusted vendor application. Here is what happened, what to check in your tenant, and how to shrink the access third-party apps hold.
AI Governance
An AI-BOM lists the models, datasets, and software inside an AI system in a machine-readable form. Here is what to put in one, which standard fields to use, and how to make it enforceable.
Privacy
A model aggregator sees every prompt, upload, and output you send through it. The 302.ai exposure shows why that makes it a data processor to vet, not just an API to call.
Security Operations
Two critical PHP engine flaws allow unauthenticated remote code execution on ordinary PHP sites, regardless of application code. Here is what to patch, what to do if you cannot, and what to watch for.
AI Security
An LLM endpoint turns every request into a bill. Here is how to cap what a single user, an agent loop, or a stolen API key can spend before it becomes an incident.
AI Governance
Every AI governance program starts with the same question: what AI do we actually run? Here is a compact inventory schema that answers it and stays useful after the first audit.
