第24期
AI审计周报 第24期
| ~
编者按：AI审计周报每周一发布，精选AI在审计、合规与监察领域的最新动态。中英文资讯混编，帮助审计人追踪行业前沿。
本期摘要
本期共收录 78 条与AI审计、合规和风险管理相关资讯，已按主题分组整理，便于快速浏览。
合规治理
As Costs Rise & ROI Remains Elusive, Majority of Execs Say AI Agents Are Worth the Risks
- 来源: Corporate Compliance Insights
- 摘要: 30% of UK managers get specially trained on sexual harassment; Gartner IDs 5 big changes for legal functions The post As Costs Rise & ROI Remains Elusive, Majority of Execs Say AI Agents Are Worth the…
- 标签:
合规治理
2 Gurus Talk Compliance
- 来源: Corporate Compliance Insights
- 摘要: Welcome to the “Great Women in Compliance” podcast, co-hosted by Lisa Fine and Hemma Lomax. The post 2 Gurus Talk Compliance appeared first on Corporate Compliance Insights…
- 标签:
合规治理
Yes, You Are Allowed to Take Your Vacation
- 来源: Corporate Compliance Insights
- 摘要: Why does our culture make a long break feel like an ethical dilemma? The post Yes, You Are Allowed to Take Your Vacation appeared first on Corporate Compliance Insights…
- 标签:
合规治理
A Field Guide to Privacy Law for Companies Entering the US Market
- 来源: Corporate Compliance Insights
- 摘要: Businesses wanting to operate in the US have a variety of laws and regulations to consider The post A Field Guide to Privacy Law for Companies Entering the US Market appeared first on Corporate Compli…
- 标签:
合规治理
When Misconduct Reaches the C-Suite, Who Investigates?
- 来源: Corporate Compliance Insights
- 摘要: From selecting outside counsel to safeguarding privilege, the decisions in-house counsel makes early determine an independent investigation’s credibility The post When Misconduct Reaches the C-Suite, …
- 标签:
合规治理
AI行业
Prompt: The AI Threat Model Just Changed
- 来源: AI Business
- 摘要: OpenAI’s security incident highlights a new challenge for enterprises: governing increasingly autonomous AI systems…
- 标签:
AI行业
What the OpenAI-Hugging Face Hack Means for Enterprises
- 来源: AI Business
- 摘要: The incident is a lesson for enterprises that they need to implement appropriate cybersecurity guidance and keep their data within safe confines…
- 标签:
AI行业
Schneider Electric, AMD Unveil Blueprint for AI Factory Deployments
- 来源: AI Business
- 摘要: The companies’ design supports AI racks of up to 246kW…
- 标签:
AI行业
Startup Focused on Enterprise AI Security Valued at $1.2 billion
- 来源: AI Business
- 摘要: The vendor has attracted notable funding as AI-related cybersecurity concerns rise…
- 标签:
AI行业
Microsoft-Mistral Partnership is About Sovereign AI
- 来源: AI Business
- 摘要: The alliance strengthens Mistral’s position as the leading European AI vendor, while extending Microsoft’s presence in Europe…
- 标签:
AI行业
科技前沿
The quest to keep organs alive outside the body
- 来源: MIT Technology Review
- 摘要: This week, I covered a fascinating effort to preserve organs outside the body. There’s a huge shortage of donor organs, and one of the main reasons is time—they survive only a matter of hours outside …
- 标签:
科技前沿
The Download: an organ transplant breakthrough, and homegrown Chinese chips
- 来源: MIT Technology Review
- 摘要: This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Supercooled kidneys have been transplanted into pigs in a “lan…
- 标签:
科技前沿
The Download: energy transmission and US threats against Chinese AI
- 来源: MIT Technology Review
- 摘要: This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. The power line that could reshape New York’s grid is hitting s…
- 标签:
科技前沿
How AI helps scientists design the next generation of medicines
- 来源: MIT Technology Review
- 摘要: Designing and developing a new medicine is an expensive, failure-prone scientific challenge. A new drug can take many years to develop, at the cost of a significant investment. And even then, most pos…
- 标签:
科技前沿
The power line that could reshape New York’s grid is hitting snags
- 来源: MIT Technology Review
- 摘要: On July 3, as a heat wave swept the region, New York State’s grid imported 52 gigawatt-hours of electricity from Canada—enough to meet about 9% of its total electricity demand that day. Some of that p…
- 标签:
科技前沿
安全合规
Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable
- 来源: The Hacker News
- 摘要: A malvertising operation dubbed SourTrade is making victims’ browsers build the final Windows executable themselves, using a legitimate Bun runtime as its base instead of serving one complete maliciou…
- 标签:
安全合规
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available
- 来源: The Hacker News
- 摘要: Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba’s JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execu…
- 标签:
安全合规
CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking
- 来源: The Hacker News
- 摘要: For years, phishing campaigns targeting financial institutions followed the same playbook. Victims were tricked into entering usernames and passwords, attackers collected the credentials, and accounts…
- 标签:
安全合规
Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE
- 来源: The Hacker News
- 摘要: Threat actors linked to the Cl0p (aka Chubby Scorpius, FIN11, Graceful Spider, and Lace Tempest) ransomware campaign are exploiting flaws in internet-exposed PTC Windmill and FlexPLM deployments as pa…
- 标签:
安全合规
DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts
- 来源: The Hacker News
- 摘要: The operators of the DevMan ransomware-as-a-service (RaaS) scheme are maintaining a dedicated web platform that offers affiliates the ability to build payloads, oversee earnings, and manage various as…
- 标签:
安全合规
调查
Ken Paxton Touts His Efforts to Fight Voter Fraud. His Senate Opponent Is Now Accusing Him of Committing It.
- 来源: ProPublica
- 摘要: The post Ken Paxton Touts His Efforts to Fight Voter Fraud. His Senate Opponent Is Now Accusing Him of Committing It. appeared first on ProPublica…
- 标签:
调查
5 Raw Quotes From America’s Largest Raw-Milk Dairy Owner
- 来源: ProPublica
- 摘要: The post 5 Raw Quotes From America’s Largest Raw-Milk Dairy Owner appeared first on ProPublica…
- 标签:
调查
合规科技
You can just use us for the AI
- 来源: Unit21 Blog
- 摘要: Weighing build vs buy for financial crime AI? Unit21’s new API lets you call our agent from your existing stack and get the decision and reasoning back…
- 标签:
合规科技
AI task spotlight | Edition no. 06: Custom Structuring Detection
- 来源: Unit21 Blog
- 摘要: Stop relying on static templates for structuring detection. Explore how Unit21’s Agentic Task Builder allows teams to define, backtest, and deploy custom structuring checks tailored to their specific …
- 标签:
合规科技
企业AI战略
Author Talks: Why founders misunderstand customer demand
- 来源: McKinsey Insights
- 摘要: Why do so many promising products fail to gain traction? A McKinsey alumnus explains why conventional thinking leads founders astray—and shares a practical framework for finding the “ideal” customer…
- 标签:
企业AI战略
How AI agents can help FP&A better steer the business
- 来源: McKinsey Insights
- 摘要: AI makes continuous financial planning practical at scale. Organizations can identify risks sooner, evaluate trade-offs faster, and intervene before performance gaps widen…
- 标签:
企业AI战略
The human advantage in an AI economy
- 来源: McKinsey Insights
- 摘要: Tech investment alone won’t deliver a competitive edge. Organizations need systems that strengthen both brain health and AI-era skills so people can keep up with rising cognitive demands…
- 标签:
企业AI战略
How AI will reshape the economics of insurance: A CEO’s guide to strategy
- 来源: McKinsey Insights
- 摘要: AI could upend the industry’s long-standing structures and dynamics. Competitive advantage will accrue to carriers, distributors, and tech providers that prepare now…
- 标签:
企业AI战略
How Montefiore Einstein turned technology into enterprise value
- 来源: McKinsey Insights
- 摘要: The academic and safety-net hospital system is transforming technology into a driver of patient access, operational reliability, and business growth. By strengthening digital tools, modernizing system…
- 标签:
企业AI战略
企业AI应用
5 endpoint blind spots your EDR/XDR was never built to see
- 来源: CIO.com
- 摘要: In August 2025, 126 malicious packages landed in the npm registry. Even after the community caught the initial wave, 80 of these hidden backdoors remained actively listed. That was enough. Over 86,000…
- 标签:
企业AI应用
IT leaders: Leading-edge AI insights await at TechCrunch Disrupt
- 来源: CIO.com
- 摘要: For CIOs, learning from the startup ecosystem has never been more critical. As pressure mounts to transform business operations with AI and agentic systems, IT leaders should be looking to those on th…
- 标签:
企业AI应用
Model Context Protocol is going stateless to make scaling simpler
- 来源: CIO.com
- 摘要: Model Context Protocol (MCP), the emerging standard for connecting AI models to external tools and enterprise data, is undergoing its biggest architectural overhaul yet. The latest release candidate, …
- 标签:
企业AI应用
Getting a grip on shadow tokens and AI blowouts
- 来源: CIO.com
- 摘要: Four months of Claude Code — that’s all it took for Uber to burn through its entire annual budget for AI. Token after token, engineers embraced the platform with few control mechanisms tying costs to …
- 标签:
企业AI应用
Atos launches sovereign cloud service to power comeback
- 来源: CIO.com
- 摘要: Atos has launched a new sovereign cloud platform aimed squarely at European public sector bodies, healthcare providers and defense organizations. It’s the latest effort by European companies in their …
- 标签:
企业AI应用
AI科技
No Dumb Questions: What is the AI bottleneck? How does context engineering fix it?
- 来源: Stack Overflow Blog
- 摘要: In this No Dumb Questions, Stack’s Director of Data Science Michael Foree teaches Phoebe about AI context, context engineering, and what she can do to become a better context engineer. …
- 标签:
AI科技
Partnerships can keep open source sustainable
- 来源: Stack Overflow Blog
- 摘要: Ryan welcomes VoidZero’s Evan You and Cloudflare’s Dane Knecht back to the show to discuss Cloudflare’s recent acquisition of VoidZero and what it means for JavaScript development, how partnerships li…
- 标签:
AI科技
The future of development is full-stack
- 来源: Stack Overflow Blog
- 摘要: Live from Snowflake Summit, Ryan talks with Snowflake’s Head of Developer Experience Umesh Unnikrishnan about the industry-wide shift from “vibe coding” for quick prototypes to agentic engineering for…
- 标签:
AI科技
The Economics of Agentic AI: Engineering for Imperfection
- 来源: O’Reilly Radar
- 摘要: The price of adoption euphoria You played entirely by the book. You procured the most capable enterprise models, mandated adoption across your teams, and put the right metrics in place. The promise wa…
- 标签:
AI科技
This Week in AI: The Price of Intelligence
- 来源: O’Reilly Radar
- 摘要: AI buyers have more choices than they did a year ago, but they also carry more responsibility for cost, reliability, security, and regulatory risk. This week, data and AI evangelist Christina Stathopo…
- 标签:
AI科技
AI前沿
SymptomAI: Towards a conversational AI agent for everyday symptom assessment
- 来源: Google Research Blog
- 摘要: General Science…
- 标签:
AI前沿