Taiwan Financial Supervisory Commission

Headlines · 2

1. 7h
   AI governance is nearing the turning point data governance hit a decade ago

   A TechNews commentary argues that enterprise AI governance now mirrors the data governance phase of the early 2010s: departments deploy models without central review, SaaS vendors embed AI features, and agentic AI can reach unapproved data, so visibility is the first problem. It recommends building a continuously updated AI inventory, similar to a data catalog, that records every production model, agent and pipeline along with risk tier, data classification, owner and compliance status, and embedding controls into operations such as prompt-injection detection, pre-output sensitive-data detection, sandboxing agents and tamper-evident audit trails, then mapping those controls to NIST's AI risk framework, the EU AI Act and ISO 42001. The piece cites IDC projections that Asia-Pacific AI and generative AI spending will grow nearly fivefold from $73 billion in 2024 at a 38.4% compound annual rate, and a PwC 2026 survey finding that 31% of Taiwanese companies say their most-used AI tool can access all files and data while only 28% have responsible-AI and risk-management governance, below 51% globally and 54% in Asia-Pacific.

   科技新报 · 🔥 8
2. 3d
   Security roundup: PoeLLM malware hits 3,400+ servers running LiteLLM and Ollama

   iThome Taiwan's weekly security roundup for October 12–16 reports that the PoeLLM malware is targeting publicly exposed AI and open-source services including LiteLLM and Ollama, with more than 3,400 servers compromised and used for mining as well as further scanning and attacks. Citing Lumen's Black Lotus Labs, the report says samples contained a test endpoint linked to the LiteLLM command-injection flaw CVE-2026-42271, a possible infection route, and that the attackers hid command-and-control addresses in an English poem on GitHub that can be edited to switch victims to a new server. The same roundup notes Taiwan's Financial Supervisory Commission issued a consultation document on agentic AI security for the financial sector covering governance, risk tiering and controls, and that Singapore's CSA warned the Carbonato botnet deploys AI agents on compromised Docker hosts to steal credentials.

   iThome 台湾 · 🔥 0

Experience and discussion from the community

Share my Taiwan Financial Supervisory Commission experienceAsk about Taiwan Financial Supervisory Commission