A new study from technology security company Kiteworks found that 27% of companies reported that nearly a third of all of the data sent to AI systems is the type of information that should be kept private, like company records, employee information and trade secrets. (It could be more; 17% of companies don’t know how much private data ends up getting sent to AI.) It’s a problem that’s growing. A Stanford University report on AI found a 56.4% increase in security incidents with the technology last year.

While it may seem obvious to the tech savvy, many employees might not know the risks of this kind of AI sharing, and 83% of companies only rely on training or warning emails to let them know. Kiteworks found that just 17% have automatic controls that keep employees from uploading sensitive information to public AI tools. Further, most companies don’t have much of an AI governance structure—only 9%, according to Deloitte research cited by Kiteworks.

The study results show that companies need to add policies and infrastructure to control employee use of AI and protect their own data. This kind of use can cause real damage to companies—not to mention their employees and clients. The study concludes that companies need to acknowledge the threat, deploy controls that can be verified, and ensure that they can stand up to regulatory scrutiny.

“With incidents surging, zero-day attacks targeting the security infrastructure itself, and the vast majority lacking real visibility or control, the window for implementing meaningful protections is rapidly closing,” Kiteworks CMO Tim Freestone said in a statement.

Many people still haven’t grasped how to truly use AI to benefit their company—we all know its practical business functions go beyond asking a chatbot for advice. I talked to Lindsay Phillips, cofounder and COO of tech change coaching firm SkyPhi Studios, about how to bring AI to your company and get people using it. An excerpt from our conversation is later in this newsletter.

If you like what you read here, you can easily share it online and on your social media pages. This newsletter, and all previous editions of Forbes CIO, can be found on our website here.

Chips and robotics company, that is. At the annual meeting, Nvidia positioned itself squarely in the robotics and physical industrial AI spaces. In the company’s annual report, Huang wrote that so far this year, Nvidia has fundamentally transformed itself from a chip maker to a builder of infrastructure. While AI data centers will continue to be important, AI-powered robots in factories, hospitals, farms and cities will be what moves society forward in the not-so-distant future. “We stopped thinking of ourselves as a chip company long ago,” Huang said at the meeting, according to CNBC.

The PR war over how the attacks are seen is also riddled with conflicting imagery. AI-generated Iranian propaganda showing a rocket launch and a convoy of tanks and missiles have racked up millions of views, writes Forbes’ Emily Baker-White. These videos, which were seen throughout social media, abruptly disappeared. None of the platforms have any policies against releasing propaganda, and the videos didn’t appear to be labeled as AI-generated.  

Winder writes that it makes sense to use AI for spam. It tends to do a passable job of writing with proper grammar and spelling across a variety of languages. It can also write in a convincing way to provoke a recipient to respond. The study found that attackers seem to be using AI to draft different versions of spam and hacking emails, searching for the best way to get a recipient’s attention.

While part of business advancement today is all about personal branding and showing the world your expertise and strategic viewpoint, you may feel more comfortable quietly sitting in front of a screen. The good news is that you don’t have to be an extrovert. Here are some tips for shy people who want to build personal brands.