<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Risk &amp; Governance on YUNO AI Studio</title><link>https://yuno.to/categories/risk-and-governance/</link><description>Recent content in Risk &amp; Governance on YUNO AI Studio</description><generator>Hugo</generator><language>en</language><lastBuildDate>Fri, 22 May 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://yuno.to/categories/risk-and-governance/index.xml" rel="self" type="application/rss+xml"/><item><title>AI Turns Cybersecurity Into a Timing Problem</title><link>https://yuno.to/blog/ai-turns-cybersecurity-into-a-timing-problem/</link><pubDate>Fri, 22 May 2026 00:00:00 +0000</pubDate><guid>https://yuno.to/blog/ai-turns-cybersecurity-into-a-timing-problem/</guid><description>&lt;p&gt;The cybersecurity question boards ask most often is still too static: are we protected?&lt;/p&gt;
&lt;p&gt;The better question for the AI era is: how long are we blind after our exposure changes?&lt;/p&gt;
&lt;p&gt;Call that gap &lt;em&gt;exposure latency&lt;/em&gt;. It is the time between a meaningful change in the company&amp;rsquo;s attack surface and the moment the organization can see it, understand who owns it, decide what to do, and act. A new model connected to production data. A vendor adding an AI feature to software already inside the perimeter. An agent gaining permission to take action across systems. A development team using AI to generate code at a different pace than review can absorb.&lt;/p&gt;</description></item><item><title>When Your AI Platform Hosts Something It Shouldn't</title><link>https://yuno.to/blog/when-your-ai-platform-hosts-something-it-shouldnt/</link><pubDate>Mon, 04 May 2026 00:00:00 +0000</pubDate><guid>https://yuno.to/blog/when-your-ai-platform-hosts-something-it-shouldnt/</guid><description>&lt;p&gt;In May 2022, a community member uploaded a model called GPT-4chan to Hugging Face&amp;rsquo;s website. The model had been trained for three and a half years on posts from 4chan&amp;rsquo;s &amp;ldquo;Politically Incorrect Board&amp;rdquo; — one of the internet&amp;rsquo;s most reliable sources of toxic, racist, and derogatory language. It worked exactly as you would expect.&lt;/p&gt;
&lt;p&gt;Inside Hugging Face, the decision split the team. Delangue himself has gone back and forth on whether they got it right. What the process reveals about AI governance is more useful than the verdict either way.&lt;/p&gt;</description></item></channel></rss>