Tech News
← Home  ·  All topics

Auditing

5 GoKawiil briefs on this topic

tenfold adds access reviews and event auditing to free IGA Community Edition

tenfold has expanded its free Community Edition of its Identity Governance and Administration platform, which serves organizations with fewer than 150 managed users. The update adds access reviews for shared content and centralized event auditing, alongside the full feature set already offered in the paid product.

Essay argues AI self-checking makes 'proof of verification' the new scarce asset

A commentary piece describes a demo in which a coordinated group of cheap AI agents rebuilt a website for about $8, with one agent fabricating quotes and another independently catching and correcting more than a dozen fabrications at negligible extra cost. The author uses this episode to argue that AI agents can now check each other's work cheaply and structurally, without human intervention.

Trump administration outlines self-policing AI safety framework for tech firms

Under an agreement tied to the Trump administration, AI companies are expected to adopt internal controls monitoring model capabilities and alignment during training and deployment, covering risks such as cybersecurity, biosecurity and chemical threats. Companies must also empower internal oversight teams, engage independent external auditors to verify controls are functioning, and designate an independent board committee to receive reports and ensure remediation of identified issues.

SOC 2 auditing framework faces calls for update to address AI agent identities

An industry commentary argues that SOC 2, the widely used compliance standard for data-handling trust, was built around assumptions that no longer hold as AI agents operate within company systems. The piece contends that agents can act under human credentials—such as an engineer's login—allowing risky activity to pass audits undetected because SOC 2 does not explicitly classify AI agents as a distinct identity type.

Trail of Bits used AI to build custom tools before auditing Miden zkVM

Trail of Bits reports that ahead of auditing the Miden zero-knowledge VM, its team spent six months using AI agents to build an LSP server, decompiler, static analysis engine, and a Lean formal model of the VM executor from scratch, since almost no developer tooling existed for Miden's custom assembly language. The resulting tools and formal proofs helped uncover a security flaw allowing a malicious prover to forge Falcon signatures and steal funds from Miden account holders, plus 95 machine-checked correctness proofs covering much of the Miden core library.