第23期

AI审计周报 第23期

| ~

编者按：AI审计周报每周一发布，精选AI在审计、合规与监察领域的最新动态。中英文资讯混编，帮助审计人追踪行业前沿。

本期摘要

本期共收录 88 条与AI审计、合规和风险管理相关资讯，已按主题分组整理，便于快速浏览。

合规治理

Deals in Dispute: Activism Against M&A

  • 来源: Corporate Compliance Insights
  • 摘要: A new report from Diligent Market Intelligence and Seward & Kissel examines nearly 300 activist demands opposing the sale of US-listed companies since 2015, analyzing what makes deals vulnerable to ch…
  • 标签: 合规治理

2026 Proxy Season Trends & Updates

  • 来源: Corporate Compliance Insights
  • 摘要: A new report from Freshfields examines the trends and regulatory developments that defined the 2026 proxy season, from a sharp rise in governance proposals to the SEC’s decision to step back from its …
  • 标签: 合规治理

GRC News Roundup: Optro, OnBoard, Clarity AI, Eventus & more

  • 来源: Corporate Compliance Insights
  • 摘要: GRC technology is one of the fastest-growing segments in enterprise software, and compliance professions are rapidly evolving. Here’s the latest from across the industry. New products & platforms GRC …
  • 标签: 合规治理

CRC-Oyster Acquires Modern Regulatory Services

  • 来源: Corporate Compliance Insights
  • 摘要: Pennsylvania-based CRC-Oyster, a financial industry consulting firm, announced it acquired Modern Regulatory Services, which specializes in broker-dealer compliance and financial operations support, a…
  • 标签: 合规治理

Auxilius Raises €1.3M in Pre-Seed Round

  • 来源: Corporate Compliance Insights
  • 摘要: Auxilius, a Munich-based AI-native GRC platform, announced it raised €1.3 million in a pre-seed funding round led by High-Tech Gründerfonds with participation from Techstars and other industry-focused…
  • 标签: 合规治理

AI行业

Nvidia Broadens Physical AI Push With Robotics, Edge AI Updates

  • 来源: AI Business
  • 摘要: The chipmaker is fleshing out its physical AI ecosystem, from foundation models and edge hardware to software, developer tools and industrial partnerships…
  • 标签: AI行业

Chinese AI Startup Releases Massive Open Weight Model

  • 来源: AI Business
  • 摘要: Kimi K3 offers enterprises a 2.8 trillion parameter open model. But for U.S.-based companies, deciding whether to use it is complicated…
  • 标签: AI行业

Prompt: Enterprise AI Must Prove Its Value Beyond Deployment

  • 来源: AI Business
  • 摘要: Organizations are moving beyond AI deployment to focus on measurable business value, workflow redesign and the governance needed to successfully scale AI…
  • 标签: AI行业

OpenAI Unveils GPT-Red to Test AI Model Safety

  • 来源: AI Business
  • 摘要: While red teaming is standard practice, using humans and AI to test the security of new models is novel. Enterprises should still ensure the model they use aligns with their business and security work…
  • 标签: AI行业

Toyota Spin-Out Launches From Stealth With $300M

  • 来源: AI Business
  • 摘要: The startup, backed by Nvidia and Boeing, said its wheeled robots are already working in production and can continuously learn new industrial tasks…
  • 标签: AI行业

AI科技

The AI compute gap: Enterprises are buying infrastructure faster than they can measure what it costs

  • 来源: VentureBeat AI
  • 摘要: Across 107 enterprises, AI infrastructure spending is accelerating well ahead of the ability to see or steer its economics. Most organizations run their AI on a familiar base of hyperscalers and model…
  • 标签: AI科技

The agent security gap: 54% of enterprises have already had an AI agent incident, and most still let agents share credentials

  • 来源: VentureBeat AI
  • 摘要: Across 107 enterprises, AI agents are being given real access to systems and data while the controls meant to contain them lag behind. More than half have already had a confirmed agent security incide…
  • 标签: AI科技

The AI context gap: Enterprise AI organizations have a trust problem, not a retrieval problem — and most are still building the fix

  • 来源: VentureBeat AI
  • 摘要: Across 101 enterprises, the infrastructure that feeds AI agents their business context is being built faster than it can be trusted. Retrieval-augmented generation is already the default context sourc…
  • 标签: AI科技

The agent evaluation gap: Enterprise AI organizations have a reality-alignment problem, not a coverage problem — and most are shipping to production anyway

  • 来源: VentureBeat AI
  • 摘要: Across 157 enterprises, organizations are granting AI agents more autonomy while trusting the evaluations meant to gate that autonomy less. Half have already shipped an agent that passed their interna…
  • 标签: AI科技

Agentic orchestration: Enterprise AI organizations have a deployment problem, not a platform problem — and most are calling chatbots agents

  • 来源: VentureBeat AI
  • 摘要: Across 101 enterprises, agent orchestration is consolidating onto model-provider platforms — Anthropic’s Claude leads by a wide margin — chosen for the gravity of the underlying model and judged on re…
  • 标签: AI科技

科技前沿

The Download: perimenopause misinformation and China’s latest AI leap

  • 来源: MIT Technology Review
  • 摘要: This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. There’s a lot of hype around perimenopause. Don’t buy it. Peri…
  • 标签: 科技前沿

The risk of weather data sabotage is rising

  • 来源: MIT Technology Review
  • 摘要: Every morning, airline dispatchers, grid operators, and farmers around the world make decisions based on the same thing: a weather forecast. While these forecasts are something that most people glance…
  • 标签: 科技前沿

The Download: OpenAI unveils GPT-Red and heat pumps rise in the US

  • 来源: MIT Technology Review
  • 摘要: This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Meet GPT-Red: an LLM super-hacker OpenAI built to make its mod…
  • 标签: 科技前沿

Meet GPT-Red: an LLM super-hacker OpenAI built to make its models safer

  • 来源: MIT Technology Review
  • 摘要: OpenAI has built an LLM super-hacker called GPT-Red that it uses as a sparring partner to help its other models boost their defenses against cyberattacks. Last week the company released the latest ver…
  • 标签: 科技前沿

The Download: a useful quantum machine and a record-breaking subsea tunnel

  • 来源: MIT Technology Review
  • 摘要: This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. PsiQuantum has a plan to make a massive quantum computer out o…
  • 标签: 科技前沿

安全合规

World’s Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent

  • 来源: The Hacker News
  • 摘要: In an ironic twist, open-source artificial intelligence (AI) platform Hugging Face revealed that it was the victim of a hack perpetrated by an autonomous AI agent system.

The company said it detected…

  • 标签: 安全合规

SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines

  • 来源: The Hacker News
  • 摘要: Cybersecurity researchers have flagged a new software supply chain attack codenamed SleeperGem targeting the Ruby ecosystem after three malicious gems were published to RubyGems with the end goal of s…
  • 标签: 安全合规

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

  • 来源: The Hacker News
  • 摘要: F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched …
  • 标签: 安全合规

UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware

  • 来源: The Hacker News
  • 摘要: Russian state-sponsored threat actors have been observed leveraging the infamous ClickFix strategy to trick Ukrainian targets into infecting their own machines with data-stealing malware.

According t…

  • 标签: 安全合规

SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access

  • 来源: The Hacker News
  • 摘要: A previously undocumented threat actor has been attributed to the exploitation of recently disclosed SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances as zero-days prior their public dis…
  • 标签: 安全合规

调查

How a Man Once Ordered to Pay Libel Damages Helped Launch an Investigation Into Islamic Private Schools

  • 来源: ProPublica
  • 摘要: The post How a Man Once Ordered to Pay Libel Damages Helped Launch an Investigation Into Islamic Private Schools appeared first on ProPublica…
  • 标签: 调查

Trump Officials Want to Use Human Rights Aid to Advocate for White South Africans and Right-Wing Causes in Europe

  • 来源: ProPublica
  • 摘要: The post Trump Officials Want to Use Human Rights Aid to Advocate for White South Africans and Right-Wing Causes in Europe appeared first on ProPublica…
  • 标签: 调查

How a Paid Expert Reversed His View of a Notoriously Flawed Prosecution in the Rape of a Bestselling Author

  • 来源: ProPublica
  • 摘要: The post How a Paid Expert Reversed His View of a Notoriously Flawed Prosecution in the Rape of a Bestselling Author appeared first on ProPublica…
  • 标签: 调查

Texas Democrats Ask for Investigation Into Ken Paxton After Our Reporting Found He May Have Violated Election Law

  • 来源: ProPublica
  • 摘要: The post Texas Democrats Ask for Investigation Into Ken Paxton After Our Reporting Found He May Have Violated Election Law appeared first on ProPublica…
  • 标签: 调查

DHS Plans “All-Out War” on Immigration Scammers as Fraud Complaints Double

  • 来源: ProPublica
  • 摘要: The post DHS Plans “All-Out War” on Immigration Scammers as Fraud Complaints Double appeared first on ProPublica…
  • 标签: 调查

合规科技

AI task spotlight | Edition no. 06: Custom Structuring Detection

  • 来源: Unit21 Blog
  • 摘要: Stop relying on static templates for structuring detection. Explore how Unit21’s Agentic Task Builder allows teams to define, backtest, and deploy custom structuring checks tailored to their specific …
  • 标签: 合规科技

TRM Labs + Unit21: On-chain risk native to your investigation workflow

Esports and gaming fraud: the scoreboard that runs in the background

  • 来源: Unit21 Blog
  • 摘要: How gaming and esports platforms stop chargebacks, ATO, mule activity, and money laundering, keeping fraud and AML controls audit-ready as volume spikes…
  • 标签: 合规科技

Betting platform fraud and compliance: what happens after the final whistle

  • 来源: Unit21 Blog
  • 摘要: How betting platforms stop bonus abuse, mule networks, and chargebacks in real time, and keep AML compliance audit-ready long after the final whistle…
  • 标签: 合规科技

企业AI战略

AI in the Australian for-purpose sector: Laying a strong foundation

  • 来源: McKinsey Insights
  • 摘要: AI adoption in Australian for-purpose organisations is growing, but without a considered approach, AI can add pressure and prioritise output over outcomes. How can leaders prepare their teams for more…
  • 标签: 企业AI战略

How B.TECH transformed into a technology-powered retailer

  • 来源: McKinsey Insights
  • 摘要: The Egyptian electronics retailer partnered with McKinsey to reinvent customer commerce through AI-powered pricing, fulfillment, and fintech—unlocking rapid growth and new digital revenue streams…
  • 标签: 企业AI战略

The future of B2B sales: How growth champions rewire their playbooks with AI

  • 来源: McKinsey Insights
  • 摘要: AI pilots are everywhere, but value is not. Growth leaders rewire commercial impact journeys with agentic AI, enabling sellers to deepen customer relations and create real change…
  • 标签: 企业AI战略

The CEO’s role in transformation

  • 来源: McKinsey Insights
  • 摘要: Transformations often falter due to internal dynamics that divide organizations, such as misaligned incentives, siloed efforts, and risk aversion. CEOs are uniquely positioned to address these challen…
  • 标签: 企业AI战略

How AI is reshaping the future of the AEC industry

  • 来源: McKinsey Insights
  • 摘要: AI is poised to rewire the architecture, engineering, and construction sector. Firms that move quickly to reimagine workflows, improve data use, and automate work sites will thrive…
  • 标签: 企业AI战略

企业AI应用

The audit trail CIOs need before the next cyber crisis

  • 来源: CIO.com
  • 摘要: In one ransomware response I observed, the master operational dashboard remained green while the underlying environment told a very different story. It was a classic example of what we in the IT audit…
  • 标签: 企业AI应用

China creates World AI body with Russia and 27 others, but without US

  • 来源: CIO.com
  • 摘要: China has created an international organization to set standards and introduce regulation for AI, inviting 28 other countries to join — but the US, a leading AI powerhouse is not part it. The World Ar…
  • 标签: 企业AI应用

The last human relationship in cybersecurity

  • 来源: CIO.com
  • 摘要: We are inundated with promises that artificial intelligence will save us and that the next governance framework will protect us. Buy this platform, adopt that model and the hard part finally gets easi…
  • 标签: 企业AI应用

Why technology leaders are losing the AI conversation to the people who report to them

  • 来源: CIO.com
  • 摘要: I keep seeing a version of the same scene. A CEO has a question about AI. It is a real question, the kind that will shape where the company spends the next two years. The CEO does not bring it to the …
  • 标签: 企业AI应用

AI makes its case against the ‘business-savvy CIO’

  • 来源: CIO.com
  • 摘要: Once upon a time, there were actual arguments as to whether CIOs should be business people, not technology people. With any luck, these arguments were stomped out back here: “The case against the ‘bus…
  • 标签: 企业AI应用

AI前沿

  • 来源: Google AI Blog
  • 摘要: You’ll be able to securely link and interact with your go-to services directly in AI Mode…
  • 标签: AI前沿
#AI审计 #合规科技 #内部审计