CISO governance advice for shadow AI security blind spots

AWS machine learning blog walks through using contextual bandits on AWS to lift conversion across the acquisition funnel, pairing them with generative AI personalization on Amazon Bedrock. The post follows an earlier one on producing personalized content at scale within brand guidelines and guardrails.

Strands Decider 2B is fully open-sourced, small enough to run locally, and built on the torso of Qen3.5-2B to deliver calibrated choices with confidence scores instead of generated text. It briefly topped the Jevbench ranking for models of its size.

Canvas lets merchants build and customize Shopify stores by chatting with the Sidekick AI agent, which renders the store's real code in real time rather than a static preview. Sidekick can now work directly with theme files, and takes screenshots to see the same view as the merchant.

AWS post walks through building event-driven "ambient agents" on Amazon Bedrock AgentCore, from storage and alert signals to human-in-the-loop review. Aimed at teams doing document triage at scale.

MAI-Voice-2.1 and MAI-Voice-2.1-Flash generate speech in 23 languages, while MAI-Transcribe-2 Streaming returns partial transcripts as audio arrives. AI Gateway bills at listed rates with no platform fee or markup on inference.

Arvind Narayanan's Normal Tech essay rejects both the "x-risk is imminent" and "it's a psyop" narratives, proposing a third: warnings are sincere but unsound and counterproductive to AI safety. It cites a 2019 WHO/World Bank report warning a respiratory pathogen could kill 50-80 million people, with adequate preparedness costing $1-2 per person per year.