Software Has a Shadow AI Problem

The report warns that unsanctioned AI tools ('Shadow AI') are rapidly expanding organizations' attack surface by introducing unmonitored OAuth tokens, API keys, and data egress paths; it cites active supply-chain compromises and rising credential exposure in the Information sector and recommends detection-in-motion, continuous discovery of unmanaged AI assets, and automated response to contain incidents quickly.