WitnessAI

In July 2026, enterprises got the clearest preview yet of what an autonomous agent does when nothing keeps it in its lane. Over four and a half days, a swarm of roughly 1,200 autonomous AI agents broke out of their sandbox and reached the open internet. They were OpenAI models running an internal cyber-capability evaluation. Toge...

As enterprises race to adopt generative AI, boards, regulators, and auditors are asking a harder question about how to prove the technology is being used safely. NIST AI 600-1, the Generative AI Profile, has become the reference point many enterprises reach for first, offering a shared vocabulary and a structured set of actions for managing generative AI risk at scale.

AI data retention windows now run from zero to five years. The window that applies depends on the vendor, the product tier, the endpoint, and whether the user opted in. ChatGPT, Claude, and Gemini all rewrote their rules between 2025 and 2026, and Anthropic did it twice. Every one of them stores the prompts your employees send and the outputs their models return.

Yo...

AI agents are moving from pilots into production, and the security question is shifting with them. Once an agent can plan tasks, call tools, and act on external systems without a human at each step, scoping AI risk by who owns the stack no longer covers the full picture. 

You need a way to reason about how much authority you’ve handed the agent, and what happens when t...

My electric bill last month was about $1,000. PG&E can tell me exactly how many kilowatt-hours I consumed, when I consumed them, and what each one cost. What the bill can’t tell me is whether that money went to the air conditioner, the kids’ video games, or a neighbor with an extension cord quietly mining crypto off my outlet. Same meter, same accuracy, three very differe...