Mar 19, 2026 - Lina Romero - The speed of AI adoption is unlike any tech shift we’ve seen before. While the transition to SaaS and BYOD took years, AI has integrated into the enterprise in months, often moving faster than security teams can track.‍Jeremy joined the Security Weekly team to talk about AI governance and navigating the current AI landscape in regards to Shadow IT, employee privacy, and more. AI Governance and VisibilityIn this episode, Jeremy talks about how the integration of AI into enterprise workflows has created a major "visibility gap". Here are some of the highlights and key takeaways:The Problem: Organizations are deploying more attack surface in 12 months than they did in the previous decade, often without security team oversight.API-Centric Security: Since almost all AI traffic travels via APIs, API observability is the best way to gain visibility. This allows teams to inspect payloads for sensitive data leakage.User vs. App Monitoring: Monitoring should be split into two streams:Employee Usage: Protecting against data leakage (e.g., staff pasting PII into ChatGPT).Application Security: Ensuring internal AI bots don't hallucinate or fall victim to prompt injection.Privacy Concerns: There is a significant cultural divide between the US and Europe regarding employee monitoring, requiring tools that can redact or encrypt prompts to satisfy GDPR-style privacy expectations.If you enjoyed this episode Subscribe to This Week in AI Security to get the latest news on emerging tools, threats and vulnerabilities in the world of AI.‍

Security Boulevard is a leading cybersecurity news and information portal, offering articles, analysis, and insights on cybersecurity threats, vulnerabilities, and best practices. From the latest trends in cyber threats to expert commentary on security technologies and compliance frameworks, Security Boulevard provides resources for security professionals, IT leaders, and business executives seeking to protect their organizations from cyber attacks and data breaches.

Security Boulevard

Enterprise AI adoption is outpacing security teams' ability to track it, creating a major visibility gap. Since nearly all AI traffic travels via APIs, API observability is the most effective way to monitor for sensitive data leakage. Monitoring should be split into two streams: employee usage (e.g., preventing PII from being pasted into ChatGPT) and application security (guarding against hallucinations and prompt injection in internal AI bots). There is also a cultural divide between the US and Europe on employee monitoring, requiring tools that can redact or encrypt prompts to meet GDPR-style requirements.

Jeremy Snyder talks AI Governance on Security Weekly – FireTail Blog