CuraSec

tag: Enterprise-Risk · 2 items

2026-10-17 · Microsoft Security Blog · source ↗ #ai-security#open-weight-models#enterprise-risk
  • Engineer — Learn: Provides a shared taxonomy and control framework for open-weight model deployments; worth reading if you’re operationalizing models like Llama or Mistral in your infrastructure, but no immediate patch or config change required.
  • SOC/IR — Skip
  • Leader — Learn: Microsoft and NVIDIA’s joint framework could anchor an internal AI governance policy for open-weight model use, but the summary is thin and this is vendor-backed guidance — useful background for a future AI risk board deck, not an immediate action.
2026-08-25 · The Hacker News · source ↗ #ai-governance#shadow-ai#enterprise-risk
  • Engineer — Skip
  • SOC/IR — Skip
  • Leader — Learn: Vendor-sourced (Akamai) but the framing that a small cohort of AI power users embedding unvetted tools into critical workflows creates concentrated risk is worth noting when building AI acceptable-use policy — size this against your own AI usage data before citing it to the board, given the single-source provenance.