VulnHub

Real-time Cybersecurity News

AI compliance issues hit 2 in 5 large companies, and legacy workflows are a big factor

Help Net Security

Overview

A recent survey by Sapio Research revealed that 40% of large companies faced issues related to AI compliance or governance in the last year. The survey involved 1,000 senior leaders in IT, operations, and transformation. A significant 84% of these incidents were linked to problems in existing workflows, which were often designed for human involvement. These workflows included manual approvals and handoffs, making them incompatible with the automated nature of AI. This situation raises concerns about how companies integrate AI into their processes, highlighting the need for better alignment between technology and workflow design to mitigate compliance risks.

Key Takeaways

  • Affected Systems: Large companies using AI systems
  • Action Required: Companies should reassess and redesign their workflows to better accommodate AI integration.
  • Timeline: Newly disclosed

Original Article Summary

Forty percent of large companies had an AI-related compliance or governance issue in the past 12 months, according to 1,000 senior IT, operations, and transformation leaders surveyed by Sapio Research. Those leaders said process-related problems contributed to 84 percent of the incidents. The researchers trace the exposure to workflows designed around people. Approvals, handoffs, and manual exceptions exist because a person was expected to handle each step. When a company drops AI into that design, … More → The post AI compliance issues hit 2 in 5 large companies, and legacy workflows are a big factor appeared first on Help Net Security.

Impact

Large companies using AI systems

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Newly disclosed

Remediation

Companies should reassess and redesign their workflows to better accommodate AI integration.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Read Original Article

Related Coverage

Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors

The Hacker News

A North Korean hacking group known as Jade Sleet has been linked to a breach involving a smaller Indian IT services firm. Cybersecurity researchers from SentinelOne reported that the attackers used sophisticated backdoors named FLATROOF and ROOFDECK to infiltrate the organization. The breach underscores the ongoing strategy of targeting smaller developers, which can provide access to larger networks. This incident raises concerns about the security practices of IT service providers, as they often hold sensitive information that could be exploited in further attacks. Companies in the tech sector should reassess their security measures to prevent similar breaches.

Sep 21, 2026

Intent injection attacks are a new worry for AI-native 6G networks

Help Net Security

Researchers from the University of Ottawa and Nokia Bell Labs have raised concerns about a new type of cybersecurity threat specifically targeting AI-native 6G networks. This threat, known as adversarial intent injection, takes advantage of the intent-based networking (IBN) approach, which allows operators to define desired outcomes while the software translates these into network policies. The researchers argue that this abstraction could give attackers greater opportunities to exploit vulnerable APIs. They tested two machine-learning detectors against this type of attack, indicating that the issue is serious enough to warrant further investigation and solutions. As 6G technology continues to develop, it’s crucial for network operators to address these vulnerabilities to safeguard against potential malicious actions.

Sep 21, 2026

U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog

Security Affairs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added several vulnerabilities in the Linux Kernel to its Known Exploited Vulnerabilities catalog. This update indicates that these flaws have been identified as actively exploited in the wild, posing risks to various systems that rely on the Linux operating system. While specific details on the nature of the exploits are not currently available, the inclusion of these vulnerabilities in the catalog signals a need for immediate attention from system administrators and security teams. Users and organizations utilizing affected Linux versions should prioritize patching their systems to mitigate potential attacks, as these vulnerabilities could be leveraged by attackers for unauthorized access or other malicious activities. Staying updated with the latest patches is crucial for maintaining system security.

Sep 20, 2026

Malicious npm packages evade install-script defenses at runtime

BleepingComputer

A new malware campaign is targeting users of the npm package manager, specifically through a malicious package named 'indexed-btree'. Unlike traditional attacks that insert harmful code into installation scripts, this campaign cleverly embeds malicious behavior within the normal runtime operations of the package. This method allows attackers to bypass common security defenses that monitor installation scripts. As a result, developers who unknowingly install this package could face serious security risks, including potential data breaches or system compromise. It’s crucial for developers to be vigilant and scrutinize the packages they use, as traditional safeguards may not catch these types of attacks.

Sep 20, 2026

AI Hallucinations Nearly Triggered a US-China Military Confrontation

Security Affairs

An AI-generated intelligence report nearly escalated tensions between the US and China during the Iran war by falsely claiming that a Chinese ship was transporting nuclear weapons components. According to sources cited by CNN, this misleading report circulated among US military officials, prompting discussions about a potential military operation in response. Fortunately, the situation was defused before any action was taken. This incident raises serious concerns about the reliability of AI in military intelligence and the potential for misinformation to provoke international conflict. As AI technology becomes more integrated into defense systems, ensuring accuracy and accountability in its outputs is crucial to prevent dangerous misunderstandings.

Sep 20, 2026

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 115

Security Affairs

The latest Malware Newsletter from Security Affairs reveals several significant cybersecurity threats. One incident involves a malicious browser extension targeting Twitch users, which has exposed OAuth tokens of around 30,000 individuals to Russian bots. Another report details a campaign called 'Red Heron' that exploits a known vulnerability in Gitea, allowing attackers to deploy a new Linux rootkit. Additionally, researchers discuss a one-click backdoor known as 'Gray Rabbits' that poses risks to systems. These incidents underscore the growing sophistication of malware and the need for users and organizations to remain vigilant against such threats.

Sep 20, 2026