Tag
vendor-risk
81 posts with this tag.
·8 min read
Willow Bridge RealPage Decree: What DOJ Told Two Renters
DOJ's Nov 5 reply to two renters on the Willow Bridge RealPage decree: human review is 'neither relevant nor necessary.' Each answer checked against the text.
·7 min read
FDA AI Device Orders Compared: Rules vs. Real Accuracy
Four FDA orders put algorithm-based devices in class II. I compared what each rule requires with the accuracy the first product in each type showed.
·7 min read
Text and Data Mining Exemption: Does It Cover AI Training?
No. I read the Copyright Office's Oct 28 notice, its Nov 2 correction and the rule text: the DMCA exemption is for nonprofit university researchers only.
·9 min read
HTI-5 Drops AI Model Cards: 31 Questions for Your EHR Vendor
HTI-5 ends the AI model card rule for certified EHRs on Dec 28, 2026. The 31 fields it deletes, the bias duty that stays, and how to keep both in a contract.
·9 min read
Elvis Presley Anthropic Lawsuit: A Lyrics Data Checklist
Elvis Presley's rights holders sued Anthropic on Oct 23 over 274 songs. What the complaint alleges, and a lyrics and dataset audit for teams that build on AI.
·8 min read
Warp Terminal Privacy: 3 Settings to Check After the Breach
Warp says attackers reached agent traces for up to 1% of users. Which plans send AI data to Warp, 3 settings to check, and how Copilot and Claude compare.
·7 min read
Anthropic S-1 and FTC Probe: 5 Risks for Claude Customers
Anthropic's S-1 confirms an FTC civil investigative demand and names risks Claude customers carry: usage policy cutoffs, ZDR limits and government restrictions.
·7 min read
Unbiased AI Principles: DoW LLM Contract Rules Compared
The Department of War's new unbiased AI templates ask LLM sellers for four documents. How Claude, GPT and Gemini cover them, checked Oct 27, 2026.
·6 min read
ConnectWise Cloud Backup Breach: What to Check in M365
Microsoft tied the ConnectWise Cloud Backup (SkyKick) breach to Storm-0940 and an AI attack tool. The app IDs to find in Entra and what to check next.
·7 min read
LiteLLM 1.107.0 malware and Railway leak: keys to rotate
LiteLLM 1.107.0 shipped a credential stealer and Railway says env vars may have leaked. The AI keys to rotate, plus the PHP, GitLab and Chrome patches.
·6 min read
MiraclePlus Sanctions: What US AI Teams Need to Check
MiraclePlus sanctions hit 5 entities under PAIPA, including Linwei Ding's Zhisuan. Check your investors, vendors and hires against the list.
·7 min read
FCA AI Guidance: Good Practice Checklist for Smaller Firms
The FCA's new AI good and poor practice adds no rules, but names who answers when AI goes wrong. A checklist for smaller UK firms, mapped to each section.
Showing 12 of 81 posts.