Tag
vendor-risk
73 posts with this tag.
·6 min read
ConnectWise Cloud Backup Breach: What to Check in M365
Microsoft tied the ConnectWise Cloud Backup (SkyKick) breach to Storm-0940 and an AI attack tool. The app IDs to find in Entra and what to check next.
·7 min read
LiteLLM 1.107.0 malware and Railway leak: keys to rotate
LiteLLM 1.107.0 shipped a credential stealer and Railway says env vars may have leaked. The AI keys to rotate, plus the PHP, GitLab and Chrome patches.
·6 min read
MiraclePlus Sanctions: What US AI Teams Need to Check
MiraclePlus sanctions hit 5 entities under PAIPA, including Linwei Ding's Zhisuan. Check your investors, vendors and hires against the list.
·7 min read
FCA AI Guidance: Good Practice Checklist for Smaller Firms
The FCA's new AI good and poor practice adds no rules, but names who answers when AI goes wrong. A checklist for smaller UK firms, mapped to each section.
·6 min read
DeepSeek Federal Ban: What Government Contractors Check Now
DeepSeek federal ban covers third-party products built on it. Check your SaaS, chatbots and model routers against FAR 52.204-30 before your next bid.
·6 min read
OpenCode Security Breach: What to Do With Your API Keys
OpenCode says a Console breach may have exposed users' OpenAI, Anthropic and Google keys. A checklist to revoke, rotate, check billing and cap spend.
·7 min read
Meta Commercial Terms: The AI Crawl Clause and What to Do
Meta moved its new Commercial Terms to November 20 without changing the crawl clause; its UK page still says October 30. What the clause allows, what to do.
·10 min read
Character.AI Bankruptcy: What Happens to Chats and User Data
Character.AI's Chapter 11 sale: 40 state AGs want user chats protected, and Disney's bid leaves them out. Objection and bid deadlines, plus a vendor checklist.
·9 min read
Australia AI Committee Letter: 11 Safeguards, What to Ask Vendors
What do the 11 Joint Select Committee on Artificial Intelligence safeguards mean for you? Copy our vendor questions on incidents, evaluators and data.
·11 min read
ICO Agentic AI Call for Evidence: What Developers Changed
The UK ICO named 10 AI developers that changed data practices and opened an agentic AI call for evidence closing Nov 20, 2026. Tracker and checklist.
·9 min read
USA Today Sues OpenAI: $250M Claim Over ChatGPT News Summaries
$250M USA Today OpenAI lawsuit targets ChatGPT news summaries from 19 papers. Does OpenAI's indemnity cover your team? Check your plan.
·10 min read
Governor AI Executive Orders Tracker 2026
4 governor AI executive orders in 6 days. Which ones change state procurement? Compare CA, IL, OR and VA deadlines and copy a vendor safety attestation.
Showing 12 of 73 posts.