The rising risks of shadow AI in the workplace

An exploration into the rising use of unauthorised AI tools by employees, posing significant security risks and challenging IT oversight.

  • Friday, 30th January 2026 Posted 2 months ago in by Sophie Milburn
BlackFog has released research examining the use of unauthorised AI tools in the workplace, often referred to as "Shadow AI".

The study, which surveyed 2,000 individuals, found that 86% use AI tools at least weekly for work tasks. Around 34% reported using free versions of company-approved AI tools, raising questions about how corporate data is stored and managed.

Of those using AI tools not sanctioned by their employer, 58% rely on versions that may lack enterprise-grade security and data management features. The research also suggests a general acceptance of risk, with 63% indicating it is acceptable to use such tools without IT oversight if no company-approved option is available.

A “speed over security” mindset is evident, with 60% of respondents willing to accept potential security risks to improve efficiency or meet deadlines. Additionally, 21% believe their employer would overlook the use of unapproved AI tools provided work is completed on time.

Key findings include:

  • Leadership and risk: 69% of senior executives prioritise speed over security, compared with lower proportions among junior staff.
  • Data vulnerability: Around one-third of employees report sharing sensitive information, including corporate and financial data, using unauthorised AI tools.
  • Integration risks: Approximately 51% of respondents connect AI tools to other systems without IT approval, increasing potential vulnerabilities.
The research indicates a growing need for IT oversight and management of AI tool usage. As AI becomes more integrated into workplace processes, organisations may need to address these risks to maintain data security and compliance.

Westcon-Comstor strengthens ties at RISK Conference 2026

Posted 3 hours ago by Sophie Milburn
Westcon-Comstor outlines its role in RISK Conference 2026, emphasising regional collaboration and cybersecurity advancements in the Balkans.
Acronis has introduced its GenAI Protection to help manage and secure AI usage in business environments, reflecting a growing focus on controlled AI...
iManage has appointed Ryan Begin as Vice President, Technology Partnerships and Ecosystem Strategy, and David Zember as Vice President, Global...

Talion’s cybersecurity model emphasising SME resilience

Posted 4 hours ago by Sophie Milburn
A look at cybersecurity frameworks developed to better align security practices with operational risks.
OpenText has made its enterprise data solutions available on the AWS European Sovereign Cloud, with the aim of supporting security and governance...
Ci Distribution and 42Gears have partnered to provide resellers with device management and security solutions for use across multiple market sectors.

Node4 appoints new CEO and Non-Executive Chair

Posted 22 hours ago by Sophie Milburn
Node4 has appointed Neil Muller as Chief Executive Officer and Patrick De Smedt as Non-Executive Chair, marking a leadership change as the company...
CrowdStrike has expanded its Cloud Detection and Response capabilities with integration into Google Cloud, providing real-time protection for hybrid...