Identify potential issues InfoSec teams should be aware of when choosing a single sign on (SSO) provider, as well as guidance for how to proceed.

HubSpot Test Form

The November Privacy Briefing will feature IANS Faculty members Lisa Perdelwitz and Jodi Daniels. This informal discussion will explore recent legal developments and anticipated rulings, highlighting how they influence AI strategies and surface emerging privacy risks. We will examine how infosec leaders can collaborate across teams to not only implement and operationalize privacy and data protection requirements, but also proactively manage the evolving landscape of AI-driven data challenges.

With an uptick in vibe coding and AI-assisted coding practices in general, organizations are finding their teams are trying to take advantage of the speed and efficiency of AI in development, but this is often at the expense of security. LLMs lean towards functionality over security in code generation tasks. Generated code can contain vulnerabilities such as missing input validation, SQL injection, weak authentication, hardcoded credentials and outdated cryptographic algorithm use. These risks are further amplified by unvetted training data, insecure prompting patterns and a lack of standards for integrating SAST/DAST into AI-assisted development pipelines. Add to that the growing threat of prompt injection, data poisoning and model supply chain compromise, and the attack surface expands fast.