Sanctions Compliance

Sanctions compliance refers to an organization's adherence to government-imposed restrictions on conducting business with specific countries, entities, or individuals listed on official sanction lists. In enterprise AI governance, this becomes increasingly critical as AI systems process vast amounts of data and make decisions that could inadvertently facilitate prohibited transactions or relationships. Companies must implement controls to ensure their AI models, data pipelines, and automated decision-making systems screen against current sanctions lists and maintain audit trails demonstrating compliance efforts.

1 item

ResearchGlobal2026-09-25

Three Attacks Target AI Keys, LLM APIs, and Provider Access Controls

Security researchers have documented three distinct active threats targeting AI infrastructure: credential-harvesting malware hidden in AI agent packages, a Windows implant that delegates command-and-control decisions to commercial large language models including DeepSeek and Gemini, and nearly 11,000 relay servers routing sanctioned-region traffic to Anthropic, OpenAI, and Google. Each threat exploits a different gap in how enterprises govern their AI dependencies, API credentials, and provider-level access controls. Compliance teams cannot rely on provider-side controls alone to contain any of these risks.

AI API security supply chain risk LLM misuse DeepSeek Mistral Gemini sanctions compliance credential theft