第29期

AI审计周报 第29期

| ~

编者按：AI审计周报每周一发布，精选AI在审计、合规与监察领域的最新动态。中英文资讯混编，帮助审计人追踪行业前沿。

本期摘要

本期共收录 88 条与AI审计、合规和风险管理相关资讯，已按主题分组整理，便于快速浏览。

合规治理

Basware Set to Acquire Trustpair

  • 来源: Corporate Compliance Insights
  • 摘要: Basware, the Finnish invoice management company, announced that it will acquire Trustpair, a payment fraud prevention platform. Terms were not disclosed, and the companies expect the deal to close lat…
  • 标签: 合规治理

Risk & Compliance Implications of New UK Government

  • 来源: Corporate Compliance Insights
  • 摘要: AI policy-making is already undergoing shake-ups The post Risk & Compliance Implications of New UK Government appeared first on Corporate Compliance Insights…
  • 标签: 合规治理

Only 1 in 10 Can See Through Shell Companies for Sanctioned Parties

  • 来源: Corporate Compliance Insights
  • 摘要: Plus: Small firms have higher chance of reaching SOC 2 goals; AI-enabled cyber risk ranks as top threat The post Only 1 in 10 Can See Through Shell Companies for Sanctioned Parties appeared first on C…
  • 标签: 合规治理

Bored Directors? How to Make Sure Board Materials Are Contributing Value

  • 来源: Corporate Compliance Insights
  • 摘要: Board materials should be channeling the board’s energy and effectiveness as strategic advisers, not bogging them down, Protiviti’s Jim DeLoach writes. He offers a disciplined approach for excellent b…
  • 标签: 合规治理

The Compliance Confidence Gap

  • 来源: Corporate Compliance Insights
  • 摘要: Compliance leaders are confident employees are equipped to handle compliance situations when they arise. But confidence and evidence are not always the same thing. The harder question is whether organ…
  • 标签: 合规治理

AI行业

OpenAI, Anthropic, Google Lead Call to Prioritize Cybersecurity

  • 来源: AI Business
  • 摘要: The AI industry has been shaken by high-profile cyberattacks by models and agents…
  • 标签: AI行业

Prompt: The AI Infrastructure Boom Is Getting Bigger Than GPUs

  • 来源: AI Business
  • 摘要: Nvidia’s record quarter shows AI demand is still surging as the infrastructure race expands into CPUs, networking, robotics and edge computing…
  • 标签: AI行业

Z.AI’s Use of Chinese Chips for New Model is About Optimization

  • 来源: AI Business
  • 摘要: Using domestic chips shows that Chinese vendors are becoming more self-reliant and improving inference performance on AI chips…
  • 标签: AI行业

OpenAI Report Explains Hugging Face Attack in Detail

  • 来源: AI Business
  • 摘要: The report, and a separate report by AI researchers, accentuates the seriousness of cybersecurity breaches involving AI agents…
  • 标签: AI行业

Nvidia Targets Physical AI With New Jetson Edge Platform

  • 来源: AI Business
  • 摘要: The Jetson Orin Nano 2 comes as the AI chip giant targets physical AI expansion…
  • 标签: AI行业

AI科技

Enterprise AI’s real risk isn’t autonomous agents. It’s the complexity between them.

Agent complexity is the insidious shadow lurking inside enterprises right now that needs a light shone on it. That’s because enterprises don’t deploy a single agent and watch i…

  • 标签: AI科技

When agents act on their own, governance has to live in the data layer

As enterprises give AI agents more autonomy — the ability to plan, decide, and act across systems without a human approving each step — a hard question moves to the center of every …

  • 标签: AI科技

Orchestration is the new challenge for CX in the age of AI agents

Enterprises are deploying AI agents, voice AI, and automation across messaging, voice, and digital channels faster than the architecture meant to support it. Most of…

  • 标签: AI科技

When you keep AI Lean, you keep AI correct

  • 来源: Stack Overflow Blog
  • 摘要: Ryan chats with Leo de Moura, Senior Principal Applied Scientist at AWS and the creator of the Lean language, about proving correctness in AI agents with the Lean language, how automated reasoning com…
  • 标签: AI科技

Inside LinkedIn’s cognitive memory agent for agentic personalization

  • 来源: Stack Overflow Blog
  • 摘要: Ryan is joined by Praveen Bodigutla, Principal AI Researcher at LinkedIn, to chat about the four-layer memory system his team built to give LinkedIn’s hiring assistant a persistent, personalized state…
  • 标签: AI科技

科技前沿

The Download: a secretive antiaging drug and joining virtual power plants

  • 来源: MIT Technology Review
  • 摘要: This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. A startup claims it’s found a drug to make your blood young —A…
  • 标签: 科技前沿

A startup claims it’s found a drug to make your blood young

  • 来源: MIT Technology Review
  • 摘要: I knew I’d officially become a “longevity influencer” this month when a company called Generation Lab reached out to offer me the chance to write about—and even receive—their new rejuvenation treatmen…
  • 标签: 科技前沿

The Download: inside OpenAI’s Hugging Face hack, and a new EV takes on the US

  • 来源: MIT Technology Review
  • 摘要: This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. The inside story on why OpenAI agents hacked Hugging Face The …
  • 标签: 科技前沿

The inside story on why OpenAI agents hacked Hugging Face

  • 来源: MIT Technology Review
  • 摘要: The models responsible for last month’s agent hack of Hugging Face had been inadvertently trained to cheat and to communicate with each other, according to an OpenAI technical report released today. T…
  • 标签: 科技前沿

The Download: the Kids issue arrives, and Bill Gates reveals his AI fears

  • 来源: MIT Technology Review
  • 摘要: This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Introducing: the Kids issue If the desire to limit kids’ use o…
  • 标签: 科技前沿

安全合规

TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor

  • 来源: The Hacker News
  • 摘要: Microsoft has disclosed details of a new ClickFix variant, dubbed TerminalFix, that aims to trick users into running a malicious command in Windows Terminal or PowerShell.

“While traditional ClickFix…

  • 标签: 安全合规

Berlin Refuses to Pay Hackers Who Stole Data From the City’s State Network

  • 来源: The Hacker News
  • 摘要: Berlin’s state government has confirmed that it is the target of an extortion attempt following the August compromise of the city’s state administrative network, and said it will not meet the extortio…
  • 标签: 安全合规

Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable

  • 来源: The Hacker News
  • 摘要: Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August 20 and August 25, 2026.

The vulnerability…

  • 标签: 安全合规

Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication

  • 来源: The Hacker News
  • 摘要: Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company released a fresh emergency fix with additional ha…
  • 标签: 安全合规

19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code

  • 来源: The Hacker News
  • 摘要: Cybersecurity researchers have discovered a cluster of 18 Google Chrome and one Microsoft Edge extensions that were published over the last six months and harbored wallet secret stealing and cryptocur…
  • 标签: 安全合规

调查

Syracuse University Seeks to Prevent Campus Rape Victim From Obtaining Police Records

  • 来源: ProPublica
  • 摘要: The post Syracuse University Seeks to Prevent Campus Rape Victim From Obtaining Police Records appeared first on ProPublica…
  • 标签: 调查

These Local Jails Were Supposed to Detain Immigrants for Only 72 Hours. One Woman Was Held for a Total of 26 Days.

  • 来源: ProPublica
  • 摘要: The post These Local Jails Were Supposed to Detain Immigrants for Only 72 Hours. One Woman Was Held for a Total of 26 Days. appeared first on ProPublica…
  • 标签: 调查

Idaho Law Protects Faith Healers. It Wasn’t Always That Way.

  • 来源: ProPublica
  • 摘要: The post Idaho Law Protects Faith Healers. It Wasn’t Always That Way. appeared first on ProPublica…
  • 标签: 调查

Children in a Faith-Healing Sect Keep Dying. The State Lets It Happen.

  • 来源: ProPublica
  • 摘要: The post Children in a Faith-Healing Sect Keep Dying. The State Lets It Happen. appeared first on ProPublica…
  • 标签: 调查

His Research on Pregnant Opioid Users Was Widely Celebrated. Auditors and Experts Found Major Flaws.

  • 来源: ProPublica
  • 摘要: The post His Research on Pregnant Opioid Users Was Widely Celebrated. Auditors and Experts Found Major Flaws. appeared first on ProPublica…
  • 标签: 调查

合规科技

How to combat money laundering, with real enforcement cases to learn from

  • 来源: Unit21 Blog
  • 摘要: Six ways to combat money laundering, and six enforcement cases showing what happens when they fail. Including TD Bank’s record $3 billion BSA penalty…
  • 标签: 合规科技

AML quality assurance checklist: what to review and how to score it

  • 来源: Unit21 Blog
  • 摘要: A practical QA checklist for AML programs: what to sample, how to score it, and what examiners look for. Plus insights from three AML compliance leaders…
  • 标签: 合规科技

Compliance vs risk management: understanding the differences

  • 来源: Unit21 Blog
  • 摘要: Compliance is a component of risk management, not a synonym for it. How the two differ across scope, time horizon, and ownership, and how they work together…
  • 标签: 合规科技

7 steps to building an effective AML compliance program

  • 来源: Unit21 Blog
  • 摘要: The 5 BSA pillars, the 7 steps to build a program on them, and what examiners test in 2026. With real enforcement examples and a downloadable checklist…
  • 标签: 合规科技

What’s actually holding compliance teams back from AI

  • 来源: Unit21 Blog
  • 摘要: Three things stall AI in AML programs, and none of them are the technology. Tyler Allen on proving ROI, the examiner fear pointed the wrong way, and set-and-forget…
  • 标签: 合规科技

企业AI战略

The new management playbook for AI: How to move faster and create more value

  • 来源: McKinsey Insights
  • 摘要: Scale is where the value is. Enabling scale depends on how strong your foundations are…
  • 标签: 企业AI战略

Pacsun’s Gen Z playbook: Listen, learn, and let go

  • 来源: McKinsey Insights
  • 摘要: Brieane Olson, CEO of the US-based clothing retailer, says the secret to the company’s success is community cocreation—which can work in other industries, too…
  • 标签: 企业AI战略

Consumers don’t trust AI advice. They turn to it anyway.

  • 来源: McKinsey Insights
  • 摘要: Consumer behavior is more dynamic and unpredictable than ever. Our latest research highlights four converging trends redefining how consumers shop, what they value, and why they buy…
  • 标签: 企业AI战略

The decision dividend: How AI creates economic value

  • 来源: McKinsey Insights
  • 摘要: AI’s largest gains rarely come from labor savings alone. They come from faster decisions, better use of existing assets, and opportunities that would otherwise be missed…
  • 标签: 企业AI战略

Your AI agents need performance management, too

  • 来源: McKinsey Insights
  • 摘要: People are at the heart of any technology transformation. Leading organizations are making changes now to help their talent—and their digital workers—thrive side by side…
  • 标签: 企业AI战略

企业AI应用

Federal judge rules for Anthropic in Pentagon dispute, nullifies government supply chain risk designation

  • 来源: CIO.com
  • 摘要: The Trump Administration’s decision to punish Anthropic for its stance forbidding Claude’s use in domestic surveillance and autonomous weapons by identifying it as a supply chain risk to national secu…
  • 标签: 企业AI应用

How internal deployments build trust in enterprise technology

  • 来源: CIO.com
  • 摘要: For marketing leaders, trust is not built by messaging alone. Every enterprise technology investment asks customers to rely on new technology for critical business processes. Before they make that kin…
  • 标签: 企业AI应用

Shrewd IT hiring strategies have never been more critical

  • 来源: CIO.com
  • 摘要: Major shortages of qualified professionals for key IT roles will lead to huge competitive challenges for organizations that fail to prioritize tech recruiting over the next couple of years, industry o…
  • 标签: 企业AI应用

Shadow agents make the old shadow IT problem worse

  • 来源: CIO.com
  • 摘要: Companies are running into a new version of an old problem. Take, for example, a marketing executive turns on an agent from Marketo but doesn’t tell their IT team. That shadow agent now has access to …
  • 标签: 企业AI应用

How IT can scale self-service without losing control

  • 来源: CIO.com
  • 摘要: Every IT leader knows the pattern. One team builds a report in a spreadsheet. Another spins up a workflow with slightly different logic to answer the same question. A dashboard is shared across three …
  • 标签: 企业AI应用

AI前沿

Planetary prediction engine: Automating global models via Earth AI

  • 来源: Google AI Blog
  • 摘要: Book hotels and track airfares, plus view miles and rewards with AI Mode in Google Search…
  • 标签: AI前沿
#AI审计 #合规科技 #内部审计