{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,8]],"date-time":"2026-07-08T05:22:27Z","timestamp":1783488147454,"version":"3.55.0"},"reference-count":23,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2025,4,21]],"date-time":"2025-04-21T00:00:00Z","timestamp":1745193600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2025,4,21]],"date-time":"2025-04-21T00:00:00Z","timestamp":1745193600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["SN COMPUT. SCI."],"abstract":"<jats:title>Abstract<\/jats:title>\n          <jats:p>The progression of artificial intelligence (AI) technologies has reached a level that greatly enhances the different organizational sectors by facilitating them with the means to advance and improve systems and processes. Shadow AI implies the usage of AI tools and systems by individuals within an entity, respectively, without permission thereby implying that these tools were not directly monitored or controlled by the centralized IT or security department. It also contributes to significant cyber risks such as data and security breaches, abuse of compliance, and, in general, an increased threat landscape. This paper highlights into the emerging global security trends and Shadow AI while also covering the unique positioning within the threat landscape concerning unauthorized computation of sensitive data, safety vulnerabilities of the unmonitored AI models, and model poisoning alongside data leakage-marked out. Moreover, this paper covers how Shadow AI distracts the attack landscape while increasing the level of security problem for the organization. Shadow AI, however, can be employed to increase the ability to respond to threats, locate irregularities, and increase the range of options available for cyber solutions even with all its risks.<\/jats:p>","DOI":"10.1007\/s42979-025-03962-x","type":"journal-article","created":{"date-parts":[[2025,4,21]],"date-time":"2025-04-21T10:21:04Z","timestamp":1745230864000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":15,"title":["Shadow AI: Cyber Security Implications, Opportunities and Challenges in the Unseen Frontier"],"prefix":"10.1007","volume":"6","author":[{"given":"Deepak","family":"Puthal","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6631-1539","authenticated-orcid":false,"given":"Amit Kumar","family":"Mishra","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Saraju P.","family":"Mohanty","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Antonella","family":"Longo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chan Yeob","family":"Yeun","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,4,21]]},"reference":[{"key":"3962_CR1","doi-asserted-by":"crossref","unstructured":"Chin T, Li Q, Mirone F, Papa A. Conflicting impacts of shadow AI usage on knowledge leakage in metaverse-based business models: A Yin-Yang paradox framing. Technol Soc (2024): 102793.","DOI":"10.1016\/j.techsoc.2024.102793"},{"issue":"2","key":"3962_CR2","doi-asserted-by":"publisher","first-page":"13341","DOI":"10.48084\/etasr.6911","volume":"14","author":"E Yilmaz","year":"2024","unstructured":"Yilmaz E. O. Can 2024 Unveiling Shadows: Harnessing artificial intelligence for insider threat detection. Eng Technol Appl Sci Res 14 2 13341\u20136.","journal-title":"Eng Technol Appl Sci Res"},{"issue":"2","key":"3962_CR3","doi-asserted-by":"publisher","first-page":"104","DOI":"10.1109\/TTS.2023.3280109","volume":"4","author":"K Michael","year":"2023","unstructured":"Michael K, Abbas R, Roussos G. AI in cybersecurity: the paradox. IEEE Trans Technol Soc. 2023;4(2):104\u20139.","journal-title":"IEEE Trans Technol Soc"},{"issue":"1","key":"3962_CR4","doi-asserted-by":"publisher","first-page":"120","DOI":"10.51594\/csitrj.v5i1.709","volume":"5","author":"TO Abrahams","year":"2024","unstructured":"Abrahams TO, Ewuga SK, Kaggwa S, Uwaoma PU, Hassan AO. Dawodu. Mastering compliance: a comprehensive review of regulatory frameworks in accounting and cybersecurity. Comput Sci IT Res J. 2024;5(1):120\u201340.","journal-title":"Comput Sci IT Res J"},{"key":"3962_CR5","doi-asserted-by":"publisher","first-page":"101804","DOI":"10.1016\/j.inffus.2023.101804","volume":"97","author":"R Kaur","year":"2023","unstructured":"Kaur R, Gabrijel\u010di\u010d D, Klobu\u010dar T. Artificial intelligence for cybersecurity: literature review and future research directions. Inform Fusion. 2023;97:101804.","journal-title":"Inform Fusion"},{"key":"3962_CR6","doi-asserted-by":"crossref","unstructured":"Poehlmann N, Caramancion KM, Tatar I, Li Y, Barati M, Merz T. The organizational cybersecurity success factors: an exhaustive literature review. Advances in Security, Networks, and Internet of Things: Proceedings from SAM\u201920, ICWN\u201920, ICOMP\u201920, and ESCS\u201920 (2021): 377\u2013395.","DOI":"10.1007\/978-3-030-71017-0_27"},{"key":"3962_CR7","doi-asserted-by":"crossref","unstructured":"Tiwari R, Shanmugam S. Compliance Management, Compliance and Technical Documentation Management. In 2024 IEEE Symposium on Product Compliance Engineering-(SPCE Bloomington), pp. 1\u20135. IEEE, 2024.","DOI":"10.1109\/IEEECONF63668.2024.10739494"},{"key":"3962_CR8","doi-asserted-by":"publisher","first-page":"122442","DOI":"10.1016\/j.eswa.2023.122442","volume":"240","author":"A Habbal","year":"2024","unstructured":"Habbal A, Ali MK, Abuzaraida MA. Artificial intelligence trust, risk and security management (AI trism): frameworks, applications, challenges and future research directions. Expert Syst Appl. 2024;240:122442.","journal-title":"Expert Syst Appl"},{"issue":"4","key":"3962_CR9","doi-asserted-by":"publisher","first-page":"21","DOI":"10.1109\/MCE.2022.3196480","volume":"12","author":"A Musamih","year":"2022","unstructured":"Musamih A, Salah K, Jayaraman R, Yaqoob I, Puthal D. Ellahham. NFTs in healthcare: vision, opportunities, and challenges. IEEE Consum Electron Mag. 2022;12(4):21\u201332.","journal-title":"IEEE Consum Electron Mag"},{"issue":"2","key":"3962_CR10","doi-asserted-by":"publisher","first-page":"267","DOI":"10.1080\/19361610.2021.1989271","volume":"18","author":"S Yusif","year":"2023","unstructured":"Yusif S, Hafeez-Baig A. Cybersecurity policy compliance in higher education: a theoretical framework. J Appl Secur Res. 2023;18(2):267\u201388.","journal-title":"J Appl Secur Res"},{"key":"3962_CR11","doi-asserted-by":"publisher","first-page":"106531","DOI":"10.1016\/j.chb.2020.106531","volume":"114","author":"N Ameen","year":"2021","unstructured":"Ameen N, Tarhini A, Shah MH, Madichie N, Paul J, Choudrie J. Keeping customers\u2019 data secure: A cross-cultural study of cybersecurity compliance among the Gen-Mobile workforce. Comput Hum Behav. 2021;114:106531.","journal-title":"Comput Hum Behav"},{"issue":"1","key":"3962_CR12","first-page":"103","volume":"1","author":"N Wirkuttis","year":"2017","unstructured":"Wirkuttis N, Klein H. Artificial intelligence in cybersecurity. Cyber. Intell Secur. 2017;1(1):103\u201319.","journal-title":"Intell Secur"},{"issue":"3","key":"3962_CR13","doi-asserted-by":"publisher","first-page":"92","DOI":"10.1109\/MCE.2019.2893674","volume":"8","author":"D Puthal","year":"2019","unstructured":"Puthal D, Mohanty SP, Bhavake SA, Morgan G, Ranjan R. Fog computing security challenges and future directions [energy and security]. IEEE Consum Electron Mag. 2019;8(3):92\u20136.","journal-title":"IEEE Consum Electron Mag"},{"key":"3962_CR14","first-page":"1","volume":"1\u201328","author":"MI Ali","year":"2024","unstructured":"Ali MI, Hussain KA. Unveiling the tapestry: a comparative investigation into data-protection legislation in India and Pakistan. Socrates R\u012bga Stradi\u0146\u0161 Univ Fac Law Electron Sci J Law. no. 2024;1\u201328:1\u20138.","journal-title":"Socrates R\u012bga Stradi\u0146\u0161 Univ Fac Law Electron Sci J Law"},{"key":"3962_CR15","doi-asserted-by":"crossref","unstructured":"Said A, Yahyaoui A, Abdellatif T. HIPAA and GDPR Compliance in IoT Healthcare Systems. In International Conference on Model and Data Engineering, pp. 198\u2013209. Cham: Springer Nature Switzerland, 2023.","DOI":"10.1007\/978-3-031-55729-3_16"},{"key":"3962_CR16","doi-asserted-by":"publisher","first-page":"106848","DOI":"10.1016\/j.compbiomed.2023.106848","volume":"158","author":"N Khalid","year":"2023","unstructured":"Khalid N, Qayyum A, Bilal M, Al-Fuqaha A, Qadir J. Privacy-preserving artificial intelligence in healthcare: techniques and applications. Comput Biol Med. 2023;158:106848.","journal-title":"Comput Biol Med"},{"key":"3962_CR17","doi-asserted-by":"crossref","unstructured":"Ugwu AO, Gao X, Ugwu JO, Chang V. Ethical implications of AI in healthcare data: a case study using healthcare data breaches from the US department of health and human services breach portal between 2009\u20132021. In 2022 International Conference on Industrial IoT, Big Data and Supply Chain (IIoTBDSC), pp. 343\u2013349. IEEE, 2022.","DOI":"10.1109\/IIoTBDSC57192.2022.00070"},{"key":"3962_CR18","doi-asserted-by":"crossref","unstructured":"Lokanan ME, Maddhesia V. Supply chain fraud prediction with machine learning and artificial intelligence. Int J Prod Res (2024): 1\u201328.","DOI":"10.1080\/00207543.2024.2361434"},{"issue":"4","key":"3962_CR19","doi-asserted-by":"publisher","first-page":"33","DOI":"10.1109\/MCE.2021.3066828","volume":"10","author":"D Puthal","year":"2021","unstructured":"Puthal D, Mohanty SP. Cybersecurity issues in AI. IEEE Consum Electron Mag. 2021;10(4):33\u20135.","journal-title":"IEEE Consum Electron Mag"},{"issue":"2","key":"3962_CR20","doi-asserted-by":"publisher","first-page":"53","DOI":"10.1109\/MCE.2020.3015606","volume":"10","author":"D Puthal","year":"2020","unstructured":"Puthal D, Mohanty SP, Kougianos E, Das G. When do we need the blockchain? IEEE Consum Electron Mag. 2020;10(2):53\u20136.","journal-title":"IEEE Consum Electron Mag"},{"issue":"2","key":"3962_CR21","doi-asserted-by":"publisher","first-page":"513","DOI":"10.1007\/s13042-022-01647-y","volume":"14","author":"J Wen","year":"2023","unstructured":"Wen J, Zhang Z, Lan Y, Cui Z, Cai J, Zhang W. A survey on federated learning: challenges and applications. Int J Mach Learn Cybernet. 2023;14(2):513\u201335.","journal-title":"Int J Mach Learn Cybernet"},{"key":"3962_CR22","doi-asserted-by":"publisher","first-page":"100169","DOI":"10.1016\/j.egyai.2022.100169","volume":"9","author":"R Machlev","year":"2022","unstructured":"Machlev R, Heistrene L, Perl M, Levy KY, Belikov J, Mannor S, Levron Y. Explainable artificial intelligence (XAI) techniques for energy and power systems: review, challenges and opportunities. Energy AI. 2022;9:100169.","journal-title":"Energy AI"},{"key":"3962_CR23","doi-asserted-by":"crossref","unstructured":"Pfleeger SL, Caputo DD. Computers Secur. 2012;31(4):597\u2013611. Leveraging behavioral science to mitigate cyber security risk.","DOI":"10.1016\/j.cose.2011.12.010"}],"container-title":["SN Computer Science"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s42979-025-03962-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s42979-025-03962-x\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s42979-025-03962-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,2]],"date-time":"2025-05-02T13:43:26Z","timestamp":1746193406000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s42979-025-03962-x"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,4,21]]},"references-count":23,"journal-issue":{"issue":"5","published-online":{"date-parts":[[2025,6]]}},"alternative-id":["3962"],"URL":"https:\/\/doi.org\/10.1007\/s42979-025-03962-x","relation":{},"ISSN":["2661-8907"],"issn-type":[{"value":"2661-8907","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,4,21]]},"assertion":[{"value":"22 January 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"10 April 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"21 April 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"1 May 2025","order":4,"name":"change_date","label":"Change Date","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"Update","order":5,"name":"change_type","label":"Change Type","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"The original online version of this article was revised due to the department have been interchanged in affiliation 2 and 3 while incorporating the corrections. Now, the original article has been  corrected.","order":6,"name":"change_details","label":"Change Details","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Not applicable.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Research Involving Humans or Animals"}},{"value":"Not applicable.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Informed Consent"}},{"value":"Not applicable.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing Interests"}}],"article-number":"405"}}