第28期

AI审计周报 第28期

| ~

编者按：AI审计周报每周一发布，精选AI在审计、合规与监察领域的最新动态。中英文资讯混编，帮助审计人追踪行业前沿。

本期摘要

本期共收录 73 条与AI审计、合规和风险管理相关资讯，已按主题分组整理，便于快速浏览。

合规治理

GRC News Roundup: Speeki, Napier AI, Descartes & More

  • 来源: Corporate Compliance Insights
  • 摘要: GRC technology is one of the fastest-growing segments in enterprise software, and compliance professions are rapidly evolving. Here’s the latest from across the industry. New products & platforms Arct…
  • 标签: 合规治理

NIST Is Offering a New AI Evaluation Framework, Not Another Compliance Checklist

  • 来源: Corporate Compliance Insights
  • 摘要: Draft framework TEVV-Athlon is designed for organizational flexibility The post NIST Is Offering a New AI Evaluation Framework, Not Another Compliance Checklist appeared first on Corporate Compliance …
  • 标签: 合规治理

AI Governance Is Becoming a Named Accountability

  • 来源: Corporate Compliance Insights
  • 摘要: In UK financial services, senior managers in charge of a business area are also in charge of how AI gets used inside that unit The post AI Governance Is Becoming a Named Accountability appeared first …
  • 标签: 合规治理

Most Audit Leaders Are Using AI; Few Have a Strategy for It

  • 来源: Corporate Compliance Insights
  • 摘要: Plus: 1 in 10 UK wealth managers don’t ask for a key piece of information; ransomware payments fall while attacks increase The post Most Audit Leaders Are Using AI; Few Have a Strategy for It appeared…
  • 标签: 合规治理

Has the CTA Saga Finally Ended?

  • 来源: Corporate Compliance Insights
  • 摘要: Beneficial ownership reporting rules that once applied to more than 30 million corporate entities in the US now have just 28,000 in scope. But is this the end or just another fork in the road for BOI …
  • 标签: 合规治理

AI行业

Prompt: Agentic AI Is Outpacing Enterprise Readiness

  • 来源: AI Business
  • 摘要: As agent deployments accelerate, many enterprises are still struggling with the processes, data, costs and controls needed to support them at scale…
  • 标签: AI行业

Meta AI Now Available as a Desktop App for Mac

  • 来源: AI Business
  • 摘要: The release is part of the company’s strengthened emphasis on AI and appealing to businesses…
  • 标签: AI行业

Nvidia’s SONIC Teaches Humanoids to Move

  • 来源: AI Business
  • 摘要: Nvidia’s model uses real-time human demonstrations and training data to give operators a one-stop shop for humanoid motion…
  • 标签: AI行业

OpenAI Scales Back AI Development, but it Could be Too Late

  • 来源: AI Business
  • 摘要: The move is a response to the Hugging Face hacking incident and other cybersecurity concerns about AI models. However, enterprises need to ramp up security protections regardless of the models they us…
  • 标签: AI行业

Pony.AI Has Plans For 4,000 Robotaxis Outside China

  • 来源: AI Business
  • 摘要: Self-driving taxi service is advancing around the world…
  • 标签: AI行业

AI科技

VentureBeat names Rob Strechay as its first Lead Analyst, expanding its enterprise AI research push

  • 来源: VentureBeat AI
  • 摘要: Rob Strechay, until recently managing director and principal analyst at theCUBE Research, has joined VentureBeat as our first Lead Analyst and a founding analyst of VentureBeat Research. His arrival i…
  • 标签: AI科技

Get rid of your CAPTCHA, the future of the web is bots

  • 来源: Stack Overflow Blog
  • 摘要: Ryan chats with Brian Alvey, CTO at WordPress VIP, about how AI agents are changing the business models of the web, what parts of how we build our sites won’t survive our current digital evolution, an…
  • 标签: AI科技

AI Won’t Replace Project Managers, But It is Reshaping How Work Gets Done

Building an agentic SDLC with a QA engineering mindset

  • 来源: Stack Overflow Blog
  • 摘要: Ryan welcomes Suneet Malhotra, Senior Manager of Test Engineering at Motorola Solutions, to chat about building end-to-end agentic SDLC pipelines using MCPs, using Cohen’s kappa to evaluate multiple L…
  • 标签: AI科技

The Agent-Era Career

  • 来源: O’Reilly Radar
  • 摘要: The following article originally appeared on Addy Osmani’s blog site and is being republished here with the author’s permission. If the AI layer gets good at anything, it will be anything that has an …
  • 标签: AI科技

科技前沿

The Download: threats from space mirrors and credit for AI drugs

  • 来源: MIT Technology Review
  • 摘要: This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. This company’s plans to deploy space mirrors could jeopardize …
  • 标签: 科技前沿

Mother tongue

  • 来源: MIT Technology Review
  • 摘要: “Daddy?” Theo curled against my side in bed. “Where do words go when they die?” I’d orchestrated the bedtime routine flawlessly: bath (taken), teeth (brushed), potty (tinkled), books (two), song (one,…
  • 标签: 科技前沿

When AI designs a drug, who gets the credit?

  • 来源: MIT Technology Review
  • 摘要: When the biotech company Insilico Medicine used its computer models to propose a promising drug for pulmonary fibrosis, it enthusiastically claimed in a press release that the molecule had been “disco…
  • 标签: 科技前沿

Debates over AI consciousness are a trap

  • 来源: MIT Technology Review
  • 摘要: “Runaway” AI, “rogue” agents, and “autonomous” actors—the current rhetoric would have you believe that AI agents are not only awake and aware, but angry at their creators. Prominent tech leaders such …
  • 标签: 科技前沿

The Download: polycrisis support networks and a hydrogen gold rush

  • 来源: MIT Technology Review
  • 摘要: This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Support networks aim to help kids through the polycrisis Somet…
  • 标签: 科技前沿

安全合规

TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit

  • 来源: The Hacker News
  • 摘要: The U.S. Department of Justice (DoJ) announced on Friday that ByteDance-owned TikTok will pay $400 million to settle a 2024 lawsuit accusing the company of violating child privacy laws in the country…
  • 标签: 安全合规

14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2

  • 来源: The Hacker News
  • 摘要: Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to stealthily deliver an artificial intelligence …
  • 标签: 安全合规

Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet

  • 来源: The Hacker News
  • 摘要: Cybersecurity researchers have flagged a new malware family that’s specifically designed to infect Android-based vehicle head unit firmware developed by DoFun.

Kaspersky, which discovered the threat …

  • 标签: 安全合规

Wazuh and AI For Enhanced SOC Workflows

  • 来源: The Hacker News
  • 摘要: Artificial Intelligence (AI) has become one of this decade’s defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repeti…
  • 标签: 安全合规

GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure

  • 来源: The Hacker News
  • 摘要: A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr.

The vulnerability in question is CVE-2026-19478 (CVSS score: 9.4…

  • 标签: 安全合规

调查

Oregon Is Spending More Than Ever on Low-Income Housing. A State Law Keeps the Details Secret.

  • 来源: ProPublica
  • 摘要: The post Oregon Is Spending More Than Ever on Low-Income Housing. A State Law Keeps the Details Secret. appeared first on ProPublica…
  • 标签: 调查

Senators Criticize Trump Administration’s Demands to Access Health Data as a Condition for Lifesaving Aid

  • 来源: ProPublica
  • 摘要: The post Senators Criticize Trump Administration’s Demands to Access Health Data as a Condition for Lifesaving Aid appeared first on ProPublica…
  • 标签: 调查

合规科技

AI Task Spotlight | Edition No. 08: Account Takeover — Before vs. After Access Change

  • 来源: Unit21 Blog
  • 摘要: Stop manually comparing transaction history. See how our Agentic Task Builder automates account takeover analysis in plain English, ensuring no alert goes unscrutinized…
  • 标签: 合规科技

企业AI战略

Beyond the copilot: Scaling the agentic product development life cycle

  • 来源: McKinsey Insights
  • 摘要: Only a few software teams are seeing real impact from incorporating AI. The key is launching an AI-driven redesign of the entire product development system, rather than just deploying new tools…
  • 标签: 企业AI战略

Earning and sustaining trust in the age of AI

  • 来源: McKinsey Insights
  • 摘要: Invesco President and CEO Andrew Schlossberg argues that AI should be part of a firm’s strategy, not on the sidelines, and that trust, once lost, is hard to win back…
  • 标签: 企业AI战略

Advancing American healthcare: An interview with Seema Verma

  • 来源: McKinsey Insights
  • 摘要: A former CMS administrator and current Oracle Health and Life Sciences executive discusses leadership, public–private collaboration, and the promise of AI and value-based care…
  • 标签: 企业AI战略

How can the public sector meet the AI moment?

  • 来源: McKinsey Insights
  • 摘要: AI can help public sector agencies improve outcomes for residents and make every taxpayer dollar go further. But realizing that potential requires moving beyond experimentation and rewiring how servic…
  • 标签: 企业AI战略

Algorithms Trap Us in the Familiar. Can They Also Spark Breakthroughs?

  • 来源: MIT Sloan Management Review
  • 摘要: Gary Waters/Ikon Images Algorithmic tools promise to democratize access to knowledge and thus spark creativity and innovation, but research we conducted revealed a hidden risk: Those tools may be sile…
  • 标签: 企业AI战略

企业AI应用

Your identity governance wasn’t built for AI agents

  • 来源: CIO.com
  • 摘要: Recently, I sat in on a conversation among CIOs about “the democratization of agents”: putting large language models directly in employees’ hands, connected to business logic so people could build on …
  • 标签: 企业AI应用

Inside TIAA’s massive IT transformation to fuel business growth

  • 来源: CIO.com
  • 摘要: When Sastry Durvasula joined TIAA in early 2022, he saw an organization fighting against outdated legacy technologies and in need of a major IT refresh. Since then, the nonprofit has completed two pha…
  • 标签: 企业AI应用

The decision line

  • 来源: CIO.com
  • 摘要: Organizations are making one of the biggest decisions about AI without realizing it. Every time we automate a process… Every time we deploy a generative AI copilot… Every time we trust an AI recommend…
  • 标签: 企业AI应用

Ransomware takes aim at enterprise resilience

  • 来源: CIO.com
  • 摘要: Ransomware remains one of the most disruptive cyber threats organizations face. Companies have strengthened their cyber defenses over the years, but attackers in 2026 have become faster, more targeted…
  • 标签: 企业AI应用

The more efficient AI makes us, the more human we must become

  • 来源: CIO.com
  • 摘要: Artificial intelligence is rapidly reshaping the business landscape. It can summarize meetings, generate presentations, personalize communications, analyze customer behavior, automate repetitive tasks…
  • 标签: 企业AI应用

AI前沿

An AI tool for prioritizing candidate biomarkers from wearable sensor data

Seeing beyond BMI: Estimating cardiometabolic risk with smartphone imagery

Get closer to the game with Gemini and Pixel

  • 来源: Google AI Blog
  • 摘要: Google Gemini and Pixel partner with five global football clubs to elevate the fan matchday experience through AI and Smartphone Technology…
  • 标签: AI前沿
#AI审计 #合规科技 #内部审计