UK NCSC warns shadow AI exposes data; 71% of staff use unapproved AI tools
Codeblix_Ltd · reddit · 2026-09-08
The UK's National Cyber Security Centre warns that employees using AI tools outside approved systems can expose company or customer data and erode organizational visibility and control. Research it cites finds 71% of employees use AI tools their employer has not approved.
NCSC also flags a new agentic risk: if an AI agent has a vulnerability or bad configuration, an attacker may inherit the same data, services, and privileges the agent can access.
The recommended approach is less 'ban AI' and more 'make the approved path usable': understand why people turn to shadow AI, offer safer alternatives, and reduce risk rather than assume it will disappear.
More from Safety
- PHP WASM servers going offline briefly for PHP2SHELL vulnerability updates — MickeySteamboat · 2026-10-27
- Rachel Thomas: 'Without human authorisation' is AI PR propaganda that shifts blame — math_rachel · 2026-10-27
- Kokotajlo challenges CoT monitorability evals: what if the model didn't refuse? — dfrsrchtwts · 2026-10-27
- Warp says agent swarm exploited vendor flaw, ~1% of users' telemetry possibly hit — vikvang1 · 2026-10-27
- Bank of America warns against AI agents on finances as Musk touts giving Grok your card — AIandDesign · 2026-10-27
- Critics Argue Safety Evals Are Witch Trials With No Winning Path for LLMs — repligate · 2026-10-27