{"data":{"id":"70cc34d2-1a9a-4671-b9e3-b0857df56492","title":"The hidden risks of shadow AI","summary":"The UK's National Cyber Security Centre (NCSC) explains that shadow AI, the use of AI tools not approved by an organisation, is widespread, with one study finding 71% of employees used unapproved AI tools. It warns that this can expose sensitive data, reduce organisational control over information, and give attackers new routes into corporate systems through vulnerable AI agents.","solution":"To reduce risk, organisations should adopt a positive cyber security culture that encourages open communication, understand why staff use shadow AI, provide secure alternatives, and securely integrate AI systems into the workplace. Employees are advised to think carefully about which apps and services they use before sharing data. Refer to the NCSC and international partners' guidance on","labels":["security","policy"],"sourceUrl":"https://www.ncsc.gov.uk/blogs/the-hidden-risks-of-shadow-ai","publishedAt":"2026-09-07T12:00:00.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"regulatory","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-09-07T12:00:00.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":null,"llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}