Shadow AI: The hidden risk expanding across the enterprise

**Executive summary:** This report warns that unapproved and poorly governed AI usage — including embedded copilots, internal AI workflows, and employees using public GenAI tools — expands the attack surface, introduces AI-native threats such as prompt injection and data leakage, and outpaces traditional security controls; it recommends assessing shadow AI exposure, defining governance, and deploying integrated controls while promoting CrowdStrike Falcon AIDR as a solution.