IBM: 92% of AI security breaches trace to weak access controls

IBM found that 92% of companies that suffered an AI-related security breach had inadequate access controls for their AI systems. The underlying models themselves were rarely the actual point of failure.

Why it matters: This reframes AI security risk as mostly a conventional IT hygiene problem rather than a novel model-safety issue, echoing recent moves like Okta's acquisition of Permiso to shore up AI access governance. It suggests enterprises are deploying AI systems faster than they're extending basic identity and access controls to cover them.