[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fS81beFhWxvUxEZxzmygVT4fIR08V7bQJAVPn-zsjnz4":3},{"article":4,"iocs":52,"watch_terms":53,"solutions":54,"lesson":144},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"b96e673a-9795-4632-ad1b-b19ad482dffd","AI Data Centers Are Being Built Faster Than They Can Be Secured","ai-data-centers-are-being-built-faster-than-they-can-be-secured-b61195","AI infrastructure introduces new security risks that traditional data center designs were never built to handle. The post AI Data Centers Are Being Built Faster Than They Can Be Secured appeared first on SecurityWeek.","Lava Labs reports that AI data centers are being constructed at pace without adequate security measures, introducing risks fundamentally different from traditional data centers. The organization has identified the 'Forge' framework—ten prioritized security risks ranging from firmware integrity and multi-tenant isolation to supply chain compromise and patch velocity gaps. These risks arise because AI's computational demands and multi-tenant model break the trust assumptions underlying legacy data center security designs.","AI data centers built faster than secured, introducing ten new infrastructure security risks.","https:\u002F\u002Fwww.securityweek.com\u002Fai-data-centers-are-being-built-faster-than-they-can-be-secured\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002FAI-Datacenter-Security.jpg","2026-07-16T13:00:00+00:00","2026-07-16T14:00:10.868182+00:00",7,[17,20,23,25,27,29],{"name":18,"type":19},"Lava Labs","vendor",{"name":21,"type":22},"InfiniBand","technology",{"name":24,"type":22},"RoCE",{"name":26,"type":22},"RDMA",{"name":28,"type":22},"NVLink",{"name":30,"type":22},"Redfish\u002FIPMI","c70f3a41-2f0c-4608-870d-b8cbcd8be076",{"id":31,"icon":33,"name":34,"slug":35},null,"Cloud Security","cloud-security",[37,42,47],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":48},{"id":49,"icon":33,"name":50,"slug":51},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":55,"vendors":143},[56,85,114],{"slug":57,"name":58,"problem":59,"products":60},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[61,69,77],{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":86,"name":87,"problem":88,"products":89},"patch-management","Automated patch management","Known holes get closed in days, not months.",[90,98,106],{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":115,"name":116,"problem":117,"products":118},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[119,127,135],{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-cloud","Cortex Cloud","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcloud","Cloud security platform covering posture management and runtime protection.",{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":131,"product_name":132,"url":133,"description":134},"orca-security","Orca Security","\u002Fvendor-logos\u002Forca-security.png","orca-cloud-security-platform","Orca Cloud Security Platform","https:\u002F\u002Forca.security\u002Fplatform\u002F","Agentless cloud security platform for posture, vulnerabilities and data exposure.",{"vendor_slug":136,"vendor_name":137,"vendor_logo":138,"product_slug":139,"product_name":140,"url":141,"description":142},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-cloud","Microsoft Defender for Cloud","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fcloud-security\u002Fmicrosoft-defender-cloud","Cloud posture management and workload protection for Azure, AWS and Google Cloud.",[],{"slug":145,"title":146,"body":147,"framework_refs":148,"framework_notes":164},"ai-data-centers-outpacing-security-the-forge-framework-warns-of-critical-gaps","AI Data Centers Outpacing Security: The 'Forge' Framework Warns of Critical Gaps","AI data centers are being deployed at unprecedented speed, but security architecture is failing to keep pace with infrastructure growth. The 'Forge' framework identifies ten critical risk categories—including firmware integrity, multi-tenant isolation failures, and supply chain compromise—that stem from applying legacy security assumptions to fundamentally different AI workloads. Because AI environments are computationally dense, highly interconnected, and often shared across multiple tenants, a single misconfiguration or unpatched firmware vulnerability can have cascading consequences across the entire stack. This matters because AI infrastructure increasingly underpins critical business decisions, sensitive data processing, and national-level capabilities, making it a high-value target for sophisticated adversaries.",[149,150,151,152,153,154,155,156,157,158,159,160,161,162,163],"CIS Control 1 – Inventory and Control of Enterprise Assets","CIS Control 2 – Inventory and Control of Software Assets","CIS Control 4 – Secure Configuration of Enterprise Assets","CIS Control 7 – Continuous Vulnerability Management","CIS Control 15 – Service Provider Management","NIST SP 800-53 CM-6 (Configuration Settings)","NIST SP 800-53 SA-12 (Supply Chain Protection)","NIST SP 800-53 SI-2 (Flaw Remediation)","NIST SP 800-53 SC-7 (Boundary Protection)","NIST AI RMF – Govern 1.1 (AI Risk Policies)","NIST AI RMF – Map 1.5 (Organizational Risk Tolerance)","ISO\u002FIEC 27001:2022 – A.8.8 Management of Technical Vulnerabilities","ISO\u002FIEC 27001:2022 – A.5.21 Managing Information Security in ICT Supply Chain","ITIL 4 – Change Enablement (patch velocity governance)","ENISA AI Cybersecurity Guidelines – Supply Chain and Infrastructure Security",{}]