SINGAPORE: A growing but often overlooked cyber risk is emerging as employees turn to unauthorised artificial intelligence (AI) tools to get work done.
“It used to be ‘shadow IT’. People want to get work done, so they install some software that they shouldn’t and the company’s at risk,” said DEF CON founder Jeff Moss on Wednesday (Apr 29).
“Now, people are installing AI agents … because of the pressure to perform. But what they don’t realise a lot of times is, that data you’re giving the system goes back up to the manufacturer and is used to train (AI models),” he told CNA’s Singapore Tonight programme.
He warned that this threat of “shadow AI” could expose sensitive corporate data, even as organisations focus on more traditional cyber threats.



