{"data":{"id":"61b6d44d-aacb-42ee-b03e-8fa0d4044be4","title":"Microsoft, Nvidia push provenance checks as open-weight AI adoption accelerates","summary":"Microsoft and Nvidia urge enterprises to assess open-weight AI models throughout deployment, warning that changes to weights and configurations can weaken safeguards while task performance stays intact. A joint paper identifies 30 risk types across five categories and outlines a process for evaluating, mitigating and monitoring them, drawing on existing NIST and ISO standards. The paper is the first in a planned series on managing risks across open-weight AI deployments.","solution":"Verify model provenance with cryptographic signatures where available, and record unverified integrity as an open risk where they are not. Assess safety and capability separately, test the specific configuration to be deployed, reassess after material changes, and assess permissions, data access, connected tools, runtime behavior and operational controls at the application level. Gartner recommends independent adversarial testing, static scanning of model files, routing traffic through governed AI gateways, and isolating self-hosted runtimes.","labels":["security","policy"],"sourceUrl":"https://www.csoonline.com/article/4237095/microsoft-nvidia-push-provenance-checks-as-open-weight-ai-adoption-accelerates.html","publishedAt":"2026-10-19T12:34:25.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Microsoft","NVIDIA"],"affectedVendorsRaw":["open-weight AI models","Gartner recommendations"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-19T12:34:25.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","safety"],"aiComponentTargeted":"model","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}