Businesses ignore security when deploying AI

A new report from Orca Security highlights that, as organizations invest in AI innovation, most of them are doing so without regard for security. The report uncovers a wide range of AI risks, including exposed API keys, overly permissive identities, misconfigurations, and more. For example, 45 percent of Amazon SageMaker buckets are using easily discoverable non-randomized default bucket names, and 98 percent of organizations have not disabled the default root access for Amazon SageMaker notebook instances. It finds that 62 percent of organizations have deployed an AI package with at least one CVE. AI packages enable developers to create, train,… [Continue Reading]