MEDIUMAi
Global

Shadow AI Across Government: It's Three Problems, Not One

·Source: Sonatype (Maven/npm)

Updated:

Executive Summary

<img src="https://www.sonatype.com/hubfs/Shadow%20AI.png" alt="Image with a computer monitor at center containing a dotted line square with a downward pointing arrow" class="hs-featured-image" style="width:auto !important; m

Analysis

Most agencies and contractors now have a generative AI (GenAI) policy. Far fewer can tell you what their people are actually running.

Indicators of Compromise (3)

URL (2)
https://www.sonatype.com/blog/shadow-ai-across-government-its-three-problems-not-one
VirusTotalURLhaus
https://www.sonatype.com/hubfs/Shadow%20AI.png
VirusTotalURLhaus
Domain (1)
www.sonatype.com
VirusTotalURLhaus
Source Attribution

Originally published by Sonatype (Maven/npm) on Oct 29, 2026.

Related Threats

MEDIUMAi

Visa and Tencent ink agentic commerce and cross-border payments MoU

Weeks after securing the regulatory green light to step up its operations in China, Visa has inked a deal with the country's tech behemoth Tencent spanning cross-border payments and AI-powered commerce.

Finextra
MEDIUMAi

Claude Model Builds Exploits Across Major Browsers &amp; OSes

An unreleased version of the AI model has found and chained multiple vulnerabilities in Chrome, Safari, Android, Windows, and Linux, Anthropic says.

Dark Reading
MEDIUMAi

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

A flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux (RHEL), and other Linux distributions. The kernel's own CVE team rates it 9.8 out of 10 on the CVSS scale. Anthropic said on October 27 that its AI model wrote an exploit that uses the flaw to let a remote attacker with no credentials run commands as root on Linux servers with a

CVE-2026-98432
The Hacker News