Tag

AI Security

Articles about "AI Security"

36 articles

36 articles (showing 12)

What Sakura Internet's Breach Disclosure Teaches Us | Designing for the Day Your Cloud Provider Is Compromised

In August 2026, Sakura Internet disclosed unauthorized access to its hosting environment and later to its sales management system. This is not a piece about what the company did wrong. It walks through why provider-side intrusions happen, what legal duties stay with the customer, and how to read the scope of an ISMAP registration before you rely on it.

2026-08-19Ryuta Hamamoto

AI Security

Why Does Personal Data Leak from GitHub? Development Security Lessons for the AI Era from Money Forward's Disclosed Incident [2026 Checklist]

A fact-based review of the GitHub unauthorized-access incident that Money Forward disclosed in May 2026, drawing only on the company's official announcements.

2026-07-07Ryuta Hamamoto

AI Security

Inside the EU AI Act "Simplification": Implementation Steps for Japanese Companies Using the Digital Omnibus 2026 and ISO/IEC 42001

Inside the EU AI Act "Simplification": Implementation Steps for Japanese Companies Using the Digital Omnibus 2026 and ISO/IEC 42001.

2026-06-08Ryuta Hamamoto

AI Security

AI Security Regulation & Certification Master Guide 2026: Region × Stance × Effective-Date Matrix for Japanese Priority Setting

Across this series I have written 10 country and region AI regulation pieces, 7 certification guides, 3 level-specific deep dives, and 2 incident analyses.

2026-05-20Ryuta Hamamoto

AI Security

California AI Rules in Three Layers: Reading SB 53, AB 2013, and SB 942 by Who Is Covered

If you treat "California AI regulation" as one law, implementation will fail. In practice, three different statutes run in parallel in the same state.

2026-05-20Ryuta Hamamoto

AI Security

Sixteen Months After AIDA Died: Canada’s Federal AI Gap, “light, tight, right,” and the Provincial Patchwork

On January 6, 2025, Justin Trudeau announced his resignation and the Canadian Parliament entered prorogation.

2026-05-20Ryuta Hamamoto

AI Security

Dual Labels and Vertical Control: China’s AI Regulation Front Line—Extraterritorial Reach and a Binary Choice for Japanese Companies

What Europe, the US, and Japan debate in AI regulation is how far to regulate. The EU AI Act uses four risk tiers. The US is a federal-absent state patchwork.

2026-05-20Ryuta Hamamoto

AI Security

America’s First Comprehensive AI Law Died Before It Took Effect: Lessons from Colorado CAIA Repeal and ADMT Replacement

America’s First Comprehensive AI Law Died Before It Took Effect: Lessons from Colorado CAIA Repeal and ADMT Replacement.

2026-05-20Ryuta Hamamoto

AI Security

CSA STAR Level 1 Primer: Publishing a CAIQ Self-Assessment for Market Transparency

CSA STAR Level 1 lets cloud providers answer CAIQ v4 (200+ questions) as a self-assessment and publish it for free.

2026-05-20Ryuta Hamamoto

AI Security

CSA STAR Level 2 Third-Party Audit Complete Guide: Attestation vs Certification, Cost Ranges, and Why It Matters in Vendor DD

"We pitched our SaaS to a major US pharma company, and procurement asked whether we have CSA STAR Level 2. The CTO froze." A SaaS founder told me that last week.

2026-05-20Ryuta Hamamoto

AI Security

CSA STAR Level 3 Continuous Auditing Is Not Formally Released Yet—Why You Should Still Start API Design Now

"When is Level 3 coming out? We finished Level 2 and want to go next." A security lead at a domestic cloud provider asked me that recently. Half resigned.

2026-05-20Ryuta Hamamoto

AI Security

EU AI Act: What Actually Starts on 2 August 2026 — and Why High-Risk AI Now Lands in December 2027 and August 2028

Digital Omnibus is law: Regulation (EU) 2026/1744, adopted 8 July 2026, published in the Official Journal on 24 July 2026 and in force since 27 July 2026.

2026-05-20Ryuta Hamamoto