There\u2019s a new security risk out there, and it\u2019s come to be known as The Shadow AI Problem. It suggests that the next major corporate data breach may not come from a sophisticated nation-state actor or a phishing campaign, but rather from an employee asking an AI chatbot to read or summarize sensitive company data.<\/p>\n\n\n\n
That\u2019s the reality Itamar Golan has spent the last two years building a company around. As co-founder and CEO of Prompt Security (acquired by SentinelOne earlier this year for $250 million), he has become one of the voices warning of the gap between how fast enterprises are adopting AI and how little they understand about where their data is going. According to him, most CISOs focus on traditional attack vectors, but the real risk is employees pasting IP addresses into unauthorized tools.<\/p>\n\n\n\n
Prompt Security\u2019s platform now detects nearly 20,000 distinct AI applications operating across enterprise environments. Golan clarified that the figure isn\u2019t plugins or product variants, but 20,000 separate entities. \u201cToday, essentially almost any SaaS application, website, native application running on your endpoint\u2026 we are converging towards a landscape where any one of those will be an AI application by itself,\u201d he told me.<\/p>\n\n\n\n