SCW Aug 2026 Main Int - Client Report 2026-Global-AI-Cyber-Maturity-Report -july 29 | Page 32

SHADOW AI EXPOSURE BY INDUSTRY
% of organizations using AI beyond formal governance( below-median AI Govern with active AI-related findings).
INDUSTRY EXPOSURE
Transportation
71 %
Energy
62 %
Industrial
42 %
Healthcare
38 %
Technology
14 %
Services
8 %
Financial
5 %
Every organization assessed had findings tied directly to AI systems. Three categories dominate: AI Infrastructure Misconfiguration( 48), AI-Specific Attacks( 3), and AI Governance Gaps( 2).
AI-RELATED FINDINGS: KEY ACCESS NOT DISABLED COUNT
Cloud AI Services: key access not disabled
9
Cloud AI Services: network access unrestricted
8
Cloud ML Workspaces: public network access enabled
5
Cloud ML Workspaces: resource logs not enabled
5
Cloud ML Computes not in a virtual network
4
AI engine vulnerable to prompt injection
2
Unrestricted use of GenAI( data privacy)
1
Informal accountability in AI risk management
1
32