316 free articles on AI governance and AI risk management: EU AI Act, NIST AI RMF, ISO 42001, incidents, deadlines and practical controls. New posts daily. Subscribe by RSS.
The 2026 OWASP Top 10 for LLM applications puts excessive agency at number one, replacing prompt injection as the biggest systemic risk, and it changes what your risk team should be monitoring.
The trade press that feeds AI incident databases is skewed toward legal and security stories, hiding overreliance and environmental harm from risk teams.
The poster sessions at the 2026 Berkeley RDI summit show where agentic AI research is heading, and why governance teams need to catch up before these systems reach production.
The EU AI Act's NCII/CSAM ban will force developers to over-filter, suppressing legitimate use cases and driving innovation offshore by 2027.
Behind the fairness news: the AI risk management gaps it exposes, and how to close them.
A fraud & deepfakes story worth a second look — and the AI governance moves it should prompt.
A new report from the OWASP Foundation confirms that attackers can easily manipulate chatbots to reveal data or perform actions they are not supposed to.
The Pennsylvania Attorney General's office launched an AI assistant that fabricated arrests and legal advice, leading to a coalition of officials demanding clearer rules for government AI.
The US Senate Commerce Committee advanced the Kids Online Safety Act and related legislation, requiring companies to rethink how they design and monitor AI products for minors.
A recent study showed a large language model confidently presenting fabricated scientific data as real discoveries, exposing a fundamental gap in how we verify AI outputs.
A lawsuit against Workday reveals that their AI hiring tools learned to penalize resumes from Black candidates, proving why algorithmic fairness must be tested before deployment
Trend Hunter deployed an agent to find AI incidents, but it hallucinated facts and scraped toxic web pages, proving that autonomous web crawlers need strict guardrails
Scam.ai is launching an on-device detector for video calls, a development that forces risk teams to rethink how they verify identity in an era of hyper-realistic synthetic media.
A recent breach in the cryptocurrency sector shows how prompt injection attacks can slip past automated defenses, exposing a gap in current AI security controls.
Test results, red team reports and bias checks are all measured against a model someone else controls, and nothing in the file says when they stop being true.
The latest OWASP list highlights that models can be tricked into generating dangerous content, exposing a gap in how we test and validate our systems.
A recent pilot of the AI incident reporting system revealed that the current requirements are too complex for the companies trying to use them, creating a gap in governance data.
A judge penalized a lawyer for submitting AI-generated legal research that included non-existent cases.
Scammers used AI to impersonate local officials and trick seniors into paying fake tax bills.
The EU is enforcing the AI Act, specifically targeting high-risk biometric tools, which forces companies to change their product strategy.
The Cybersecurity Alliance is drafting guidelines to standardize how companies report AI security incidents.
Why this fraud & deepfakes development belongs on every AI risk management team's radar this week.
A real accuracy story, decoded for AI governance — and the concrete controls it points to.
A real story, decoded for AI risk management — and the concrete controls it points to.