Ieskati par MI drošību un pārvaldību

Tima Krauča raksti un video. Lielākā daļa apkopo primāro avotu, piemēram, NIST, OWASP, ISO vai ES MI aktu, un sasaista to ar CISSP domēniem, ar kuriem strādā drošības komanda. Rakstīts tiem, kuriem jāparaksta galīgais lēmums.

Raksti un video tiek publicēti angļu valodā.

Sekot LinkedIn Abonēt YouTube RSS plūsma

Jaunākais video ar rakstisku kopsavilkumu

The risk-based blueprint inside the EU AI Act

Europe didn't ban AI. It ranked the harm — and the high-risk band is where most real systems actually live.

2026. g. 25. aug.AI security

Skatīties video

Visi raksti un video

20 materiālu

Avots

Ziņu apskats, 6 min lasīšanai

GPT-6.1 Terra makes computer-use automation cheaper—and governance more urgent

OpenAI’s GPT-6.1 Terra combines visual reasoning and computer use at lower API prices. The business opportunity is high-volume workflow automation, but the model’s capability and safety profile require deliberate boundaries.

2026. g. 31. okt.AI development, honestly

Ziņu apskats, 5 min lasīšanai

GitHub now scans pull requests for AI-agent security failures

GitHub code scanning can now flag indirect prompt injection, sensitive-data exposure and excessive agency in AI applications. Here is what the preview covers and how to use it without mistaking a scanner for a security programme.

2026. g. 31. okt.AI security

Ziņu apskats, 5 min lasīšanai

Claude Duet moves AI from answering prompts to watching the work

Anthropic’s Claude Duet is a proactive agent that monitors connected apps, works in the background and asks before consequential actions. The real change is operational, not conversational.

2026. g. 24. okt.AI development, honestly

Ziņu apskats, 4 min lasīšanai

PHP2Shell: two critical PHP flaws require immediate patching

CVE-2026-109618 and CVE-2026-109619 can allow unauthenticated remote code execution in PHP web servers. Here is who is exposed, what to patch, and what to check next.

2026. g. 24. okt.EU security and compliance

Eseja, 4 min lasīšanai

An AI business case starts with the review work

A practical way to assess an AI workflow: count the checking, model adoption, include running costs, and distinguish useful capacity from money actually saved.

2026. g. 12. sept.AI development, honestly

Ietvara kopsavilkums, 2 min lasīšanai

ISO/IEC 42001 makes AI governance auditable

ISO/IEC 42001 does not prescribe seven named documents; it requires controlled evidence that AI risks, responsibilities, and decisions are managed.

2026. g. 28. aug.AI security

Ietvara kopsavilkums, 2 min lasīšanai

Secure AI agents by their traits, not their labels

The Cloud Security Alliance's trait-based approach maps agent behavior and architectural choices to concrete security risks and controls.

2026. g. 29. jūl.AI security

Eseja, 4 min lasīšanai

Rebuilding globalsoftware.ai around the work

Why we tore down our own website and rebuilt it around what we actually do: services, products in progress, experiments, and a blog that brings our writing into one home.

2026. g. 10. jūl.Lab notes

Eseja, 4 min lasīšanai

Why AI-assisted compliance review still needs a human signature

AI can read a marketing document against MiFID II requirements faster than any human. It still shouldn't be the one who approves it. That's a design principle, not a limitation.

2026. g. 10. jūl.Building CompylotAI

Ietvara kopsavilkums, 2 min lasīšanai

The OWASP AI Exchange connects AI threats to controls

The OWASP AI Exchange provides a lifecycle map for moving from AI governance and threat analysis to testing, operations, and residual-risk decisions.

2026. g. 21. jūn.AI security

Ietvara kopsavilkums, 2 min lasīšanai

Adversarial machine learning needs a common language

NIST's attack taxonomy helps security teams connect adversary goals, access, lifecycle stages, and mitigations across predictive and generative AI.

2026. g. 31. maijsAI security

Ietvara kopsavilkums, 2 min lasīšanai

Red teaming generative AI is a lifecycle discipline

Microsoft's experience across 100 generative-AI products shows why testing must follow real system risks, not a generic attack checklist.

2026. g. 5. maijsAI security

Ietvara kopsavilkums, 2 min lasīšanai

The OWASP LLM Top 10 is an application-security list

OWASP's 2025 list shows that securing an LLM application requires architecture, testing, and development controls around the model.

2026. g. 13. apr.AI security

Ietvara kopsavilkums, 2 min lasīšanai

The EU AI Act turns AI governance into an operating obligation

The EU AI Act is not only a legal classification scheme; it requires organizations to connect AI risk, data governance, oversight, and evidence.

2026. g. 28. martsEU security and compliance

Ietvara kopsavilkums, 2 min lasīšanai

Managing generative-AI risk with the NIST profile

NIST's Generative AI Profile extends the AI RMF with concrete actions for governance, data provenance, testing, and incident disclosure.

2026. g. 6. martsAI security

Ietvara kopsavilkums, 2 min lasīšanai

AI security is governance in action

BaFin's central point is simple: AI security has to cover the whole decision process, not just the model.

2026. g. 17. febr.AI security

Ietvara kopsavilkums, 2 min lasīšanai

Putting Google's Secure AI Framework into practice

Google's SAIF implementation guide turns six security principles into an organizational process for designing, deploying, and operating AI safely.

2026. g. 29. janv.AI security

Ietvara kopsavilkums, 2 min lasīšanai

Google SAIF: six elements for secure AI

Google's one-page SAIF summary provides a useful executive test for whether AI security covers architecture, operations, and business risk.

2026. g. 7. janv.AI security

Ietvara kopsavilkums, 2 min lasīšanai

NIST AI RMF: govern, map, measure, and manage

The NIST AI RMF gives organizations a lifecycle structure for connecting AI governance, assets, architecture, measurement, and risk treatment.

2025. g. 19. dec.AI security

Ieskati par MI drošību un pārvaldību

The risk-based blueprint inside the EU AI Act

Visi raksti un video

GPT-6.1 Terra makes computer-use automation cheaper—and governance more urgent

GitHub now scans pull requests for AI-agent security failures

Claude Duet moves AI from answering prompts to watching the work

PHP2Shell: two critical PHP flaws require immediate patching

An AI business case starts with the review work

ISO/IEC 42001 makes AI governance auditable

The risk-based blueprint inside the EU AI Act

Secure AI agents by their traits, not their labels

Rebuilding globalsoftware.ai around the work

Why AI-assisted compliance review still needs a human signature

The OWASP AI Exchange connects AI threats to controls

Adversarial machine learning needs a common language

Red teaming generative AI is a lifecycle discipline

The OWASP LLM Top 10 is an application-security list

The EU AI Act turns AI governance into an operating obligation

Managing generative-AI risk with the NIST profile

AI security is governance in action

Putting Google's Secure AI Framework into practice

Google SAIF: six elements for secure AI

NIST AI RMF: govern, map, measure, and manage

Sērijas

AI security

EU security and compliance

Building CompylotAI

AI development, honestly

Lab notes

Saņemiet jaunos materiālus, tiklīdz tie iznāk