AI Security Insights

Shadow AI

Unapproved AI usage on employee devices: why the existing stack cannot see it and how to build an honest inventory.

2 articles

CoSnitch (CVE-2026-24301): One Click, and Copilot Reads Your Gmail and Drive

A single crafted link was enough to drain data from connected Gmail, Drive and calendar accounts. With no visible confirmation. The flaw is patched. The underlying problem for companies is not.

Shadow AI · Aug 24, 2026 · 7 min · Read →

Your security stack can't see Shadow AI

Your CASB sees the SaaS. Your DLP sees encrypted bytes. Your firewall sees a destination. None of them see Shadow AI: prompts pasted into ChatGPT, coding agents calling internal Jira, browser extensions reading confidential docs. Here is why the stack is blind, and what fixes it.

Shadow AI · May 6, 2026 · 9 min · Read →