The Cybersecurity and Infrastructure Security Agency (CISA) released a post earlier this year saying the AI engineering community should use something like the existing CVE system for tracking vulnerabilities in AI models.

Unfortunately, this is a pretty bad recommendation.

That's because:

- CVEs already create a lot of noise
- AI systems are non-deterministic
- So things would just get worse

In this episode, I dive into these issues and discuss the way ahead.

Check out the full blog post: https://blog.stackaware.com/p/how-should-we-identify-ai-vulnerabilities

🔐 Think self-hosting your AI models is more secure?

It might be...or not!

In this video, we dig into the topic of AI model security and introduce the concept of "unintended training."

▶️ Key Highlights:

- The myth that self-hosting AI models is necessarily better for security
- Decision factors when choosing between SaaS vs. IaaS
- Defining "Unintentional Training" and its implications

Read more about unintended training and AI Security: 
https://blog.stackaware.com/p/unintended-training

And for a deep dive on the security benefits of SaaS, check out this post:
https://blog.stackaware.com/p/declaring-a-truce-on-saas-security

Hit that subscribe button for more cutting-edge AI security insights! ✅

It's a tougher challenge than many security folks talk about.

Who should have the final say about whether to accept, mitigate, transfer, or avoid risk?

- Cybersecurity?
- Compliance?
- Legal?

The answer:

None of them.

Check out this episode of Deploy Securely to learn who should.

Or read the original blog post here: https://blog.stackaware.com/p/who-should-make-cyber-risk-management