[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGAfGCEPJIliIc3HMinxr7Vp0Ig6Qe1dlx9-xuglWO7w":3},{"article":4,"iocs":54,"watch_terms":55,"solutions":56,"lesson":147},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"61a45d65-34d1-47e7-b36b-74011f7c0803","The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk","the-outsized-shadow-why-5-of-ai-users-are-your-biggest-security-risk-88f21e","Big security risks come in small packages. While enterprise security teams focus on policing the proliferation of employees using ChatGPT and Claude for quick drafting tasks, a more urgent threat is posed by a handful of AI super-adopters who are quietly hardcoding unvetted tools into critical business operations. According to new research published by Akamai, the top 5% of enterprise power","A report by Akamai reveals that a small group of AI power users (top 5%) are creating significant security risks by embedding unvetted AI tools into critical business operations. These users interact with AI models at a much higher rate than average, leading to expanded shadow AI use, increased data leakage potential, and the deployment of autonomous AI agents outside of established security guardrails. A significant portion of these interactions occur via personal accounts or corporate emails linked to personal AI subscriptions, bypassing governance and potentially exposing sensitive data to public model training.","Top 5% of AI users pose biggest security risk by hardcoding unvetted tools into operations.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F08\u002Fthe-outsized-shadow-why-5-of-ai-users.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEieDz2kEMi471xtnJ2B7i_ZktQTUHhbJAIOlNAaFfVdJVPWDC-3EqH2REiyGuaUl95lmXvtcl-oPpQy3MO0-5uulT4L4Uyheni6apbwxzycAw7yVmuYqAWaSjYbEw_BaJKsmGhrUPrb6hVeatf488NrNMVX-xorjY66ZIG9wR50pUdFBOs9avzlu9b91iw\u002Fs1600\u002Fai-usage.jpg","2026-08-24T11:30:00+00:00","2026-08-24T14:00:05.602407+00:00",7,[17,20,23,25,27,29],{"name":18,"type":19},"Akamai","vendor",{"name":21,"type":22},"ChatGPT","product",{"name":24,"type":22},"Claude",{"name":26,"type":22},"Gemini Enterprise",{"name":28,"type":22},"Microsoft Copilot M365",{"name":30,"type":22},"Microsoft Copilot Standard","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":31,"icon":33,"name":34,"slug":35},null,"AI Security","ai-security",[37,39,44,49],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21,24],{"controls":57,"vendors":141},[58,87,113],{"slug":59,"name":60,"problem":61,"products":62},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"sailpoint","SailPoint","\u002Fvendor-logos\u002Fsailpoint.png","human-fabric","SailPoint Human Fabric","https:\u002F\u002Fwww.sailpoint.com\u002Fproducts\u002Fhuman-fabric","Identity governance platform, the successor to Identity Security Cloud: lifecycle management, access requests and continuous access reviews.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"omada","Omada","\u002Fvendor-logos\u002Fomada.png","omada-identity-cloud","Omada Identity Cloud","https:\u002F\u002Fomadaidentity.com\u002Fproducts\u002Fomada-identity-cloud\u002F","Identity governance and administration delivered as a service.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"slug":88,"name":89,"problem":90,"products":91},"saas-security-posture","SaaS security posture management (SSPM)","Business apps like Microsoft 365 and Salesforce stop leaking through risky settings and connected apps.",[92,98,105],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":93,"product_name":94,"url":96,"description":97},"appomni","AppOmni","\u002Fvendor-logos\u002Fappomni.png","https:\u002F\u002Fappomni.com\u002F","SaaS security posture management for platforms such as Salesforce, Microsoft 365 and ServiceNow.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":100,"url":103,"description":104},"obsidian-security","Obsidian Security","\u002Fvendor-logos\u002Fobsidian-security.png","obsidian","https:\u002F\u002Fwww.obsidiansecurity.com\u002F","SaaS posture management and detection of account and integration compromise.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-shield","Falcon Shield","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Ffalcon-shield\u002F","SaaS security posture management, from CrowdStrike's acquisition of Adaptive Shield.",{"slug":35,"name":114,"problem":115,"products":116},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[117,125,133],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",[142],{"slug":143,"name":18,"logo_path":144,"roles":145},"akamai","\u002Fvendor-logos\u002Fakamai.png",[146],"reported_by",{"slug":148,"title":149,"body":150,"framework_refs":151,"framework_notes":163},"shadow-ai-power-users-create-outsized-data-leakage-risk","Shadow AI Power Users Create Outsized Data Leakage Risk","A small cohort of high-frequency AI users are independently embedding unvetted AI tools into critical business workflows, bypassing organizational governance entirely. Because these interactions often occur through personal accounts or personal AI subscriptions linked to corporate emails, sensitive business data may be ingested into public model training pipelines without any organizational oversight. This 'shadow AI' phenomenon mirrors the risks of classic shadow IT but moves faster and touches more sensitive data due to AI's capacity to process and retain large volumes of information. The risk is amplified by the deployment of autonomous AI agents outside established security guardrails, which can act on data without human review. If left unaddressed, this behavior can result in regulatory violations, intellectual property exposure, and irreversible data leakage to third-party AI providers.",[152,153,154,155,156,157,158,159,160,161,162],"CIS Control 2 – Inventory and Control of Software Assets","CIS Control 3 – Data Protection","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-53 AC-2 (Account Management)","NIST SP 800-53 AC-20 (Use of External Systems)","NIST SP 800-53 SI-12 (Information Management and Retention)","NIST AI RMF – Govern 1.1 (Policies for AI Risk)","GDPR Article 5 – Principles relating to processing of personal data","GDPR Article 28 – Processor obligations","ITIL Service Management – Change Enablement (unsanctioned tool risk)","ISO\u002FIEC 42001 – AI Management System",{}]