NEW RESEARCH: AI IS ALREADY THE #1 DATA EXFILTRATION CHANNEL IN THE ENTERPRISE

Summary from the TLDR InfoSec newsletter

LayerX research reveals AI has become the #1 corporate data exfiltration channel, with 45% of enterprise employees using generative AI tools and 67% accessing them through unmanaged personal accounts outside IT control. The primary threat vector is the use of copy/paste operations in AI platforms, with employees performing an average of 14 pastes per day via personal accounts, and at least three of these containing sensitive data, such as PII or PCI information. Traditional DLP tools miss this threat entirely since they're designed for file-based environments, while 40% of files uploaded to GenAI tools contain sensitive data, and 77% of employees paste corporate data directly into these platforms.