--- title: "News brief: Safeguards emerge to address security for AI" description: "The rise of AI and machine learning tools necessitates enhanced security measures. CISOs and security teams are urged to optimize protections for AI systems, especially in light of vulnerabilities hig" type: "news" locale: "en" url: "https://longbridge.com/en/news/254219912.md" published_at: "2025-08-22T17:49:46.000Z" --- # News brief: Safeguards emerge to address security for AI > The rise of AI and machine learning tools necessitates enhanced security measures. CISOs and security teams are urged to optimize protections for AI systems, especially in light of vulnerabilities highlighted at Black Hat USA 2025. NIST is seeking public input to develop security controls for AI, while a report from Infosys reveals that 95% of executives faced issues with enterprise AI, leading to significant financial losses. Companies are encouraged to adopt responsible AI practices to mitigate risks, and experts stress the importance of human oversight in AI-assisted coding to ensure security. Enterprise adoption of AI and machine learning tools is growing by the second. CISOs, security teams and federal agencies worldwide must work quickly to optimize security for AI tools and determine the best methods of keeping AI models and business-critical data safe. Agentic AI has become a major security pain point, too often handing out the keys to the kingdom, as evidenced in a zero-click exploit demonstrated at Black Hat USA 2025 that requires only a user's email address to overtake an AI agent. Meanwhile, application developers are adopting vibe coding -- using AI tools to assist with code generation -- to speed up development, yet they don't always fully understand its effects on security. According to VeraCode's "2025 GenAI Code Security Report," AI-generated code introduced security vulnerabilities in 45% of tested tasks. This week's featured articles focus on identifying methodologies to improve security for AI tools and better protect data through responsible AI at the federal and enterprise levels. ## NIST seeks public input on how to secure AI systems NIST outlined plans to develop security control overlays for AI systems based on its Special Publication 800-53: Security and Privacy Controls for Information Systems and Organizations. The federal agency created a Slack channel for community feedback on the development process. The initiative aims to help organizations implement AI while maintaining data integrity and confidentiality across five use cases: 1. Adapting and using generative AI -- assistant/large language model (LLM). 2. Using and fine-tuning predictive AI. 3. Using AI agent systems -- single agent. 4. Using AI agent systems -- multiagent. 5. Security controls for AI developers. The guidance addresses growing concerns about AI security vulnerabilities. For example, researchers at Black Hat USA 2025 this month demonstrated how malicious hackers weaponize AI agents for attacks and use LLMs to launch cyberattacks autonomously. Read the full story by David Jones on Cybersecurity Dive*.* ## Business execs eye responsible AI to reduce risks, drive growth A report from IT consulting firm Infosys found that companies are turning to responsible AI use to mitigate risks and encourage business growth. In a survey of 1,500 senior executives, 95% said they experienced at least one "problematic incident" related to enterprise AI use, with average reported losses of $800,000 due to these incidents over a two-year span. Still, more than three-quarters of respondents said AI will result in positive business outcomes, though 30% admit they are underinvesting in responsible AI use by about 30%. While organizations' definitions of responsible AI practices differ, they include incorporating fairness, transparency, accountability, privacy and security into AI governance efforts. Read the full story by Lindsey Wilkinson on Cybersecurity Dive*.* ## AI-assisted coding: Balancing innovation with security Vibe coding is in vogue right now for both good and malicious development. Industry experts, such as Danny Allan, CTO at application security vendor Snyk, have confirmed widespread adoption of AI coding tools across development teams. "I have not talked to a customer that's not using AI coding tools," he said. Organizations that permit AI-assisted code generation must consider how to do so securely. Experts shared the following key steps to mitigate vibe coding security risks: - Keep humans involved to verify that generated code is secure. AI isn't ready to take over coding independently. - Implement security from inception using specialized tools. Being able to code faster isn't useful if the code generated has vulnerabilities. - Account for AI's unpredictability by training models on secure code generation and using guardrails to keep AI-assisted code from creating weaknesses. Read the full story by Alexander Culafi on Dark Reading*.* **Editor's note:** *An editor used AI tools to aid in the generation of this news brief. Our expert editors always review and edit content before publishing.* *Kyle Johnson is technology editor for Informa TechTarget's SearchSecurity site.* ### Related Stocks - [AI.US - C3.AI](https://longbridge.com/en/quote/AI.US.md) ## Related News & Research | Title | Description | URL | |-------|-------------|-----| | 甲骨文的最悲观假设：若 AI 数据中心合同全部终止 | 伯恩斯坦极端压力测试显示，即便 OpenAI 等 AI 客户完全撤单，甲骨文仅凭核心数据库与企业云业务仍可支撑每股 137 美元估值，较当前股价下行空间仅 15%，安全边际清晰。研报同时拆解市场担忧：2480 亿美元租赁合同年度风险敞口仅 | [Link](https://longbridge.com/en/news/275745631.md) | | OpenClaw 之父爆猛料：Meta 和 OpenAI 跪着抢人，小扎亲自求收购 | 在一场重磅播客访谈中，OpenClaw 之父 Peter Steinberger 透露，Meta 的扎克伯格和 OpenAI 的 Sam Altman 都在积极拉拢他，甚至扎克伯格亲自表示对 OpenClaw 的赞赏。两大科技巨头同时争抢人 | [Link](https://longbridge.com/en/news/275962731.md) | | 马斯克的 “新大饼”：月球基地 | 马斯克以 “月球基地 Alpha” 新叙事替代火星计划，拟在月球制造并发射 AI 卫星以突破算力瓶颈。此举旨在整合 SpaceX 发射能力与 xAI 算力需求，打造差异化估值，虽技术壁垒极高，但为合并实体注入增长想象。 | [Link](https://longbridge.com/en/news/275864051.md) | | 必和必拓利润飙升 30%，铜业务首次超越铁矿石成最大利润来源 | 全球市值最大的矿业公司必和必拓（BHP）因押注铜需求激增而获得回报，上半财年净利润同比增长近 30%。铜业务贡献了公司 51% 的基础息税折旧摊销前利润，首次超越其他业务成为最大利润来源。能源和汽车行业的强劲需求持续推高铜价，令这一转型的战 | [Link](https://longbridge.com/en/news/276092142.md) | | 期权热点｜上周五 SILJ 大涨 5%，部分看涨期权飙升 103% | 美东时间 02 月 13 日， ETFMG 小市值银矿开采勘探 ETF -ETFMG 期权总成交 92131 张，看涨期权占比 89%，看跌期权占比 10%。 | [Link](https://longbridge.com/en/news/276030246.md) | --- > **Disclaimer**: This article is for reference only and does not constitute any investment advice.