Skip to content
cisonews.ai

Browse by year · 12 regulatory milestones · 6 incidents

2023 on cisonews.ai

Everything we have on record from 2023. Each page sits under the month its milestone or incident happened, newest first. cisonews.ai launched on September 27, 2026; entries about earlier events were compiled after that from public records and are labelled that way.

December 20233 entries

  1. Regulatory milestoneInternationalISO/IEC 42001:2023 AI management system standard publishedISO and IEC published ISO/IEC 42001:2023 on 18 December 2023, the first international standard for an artificial intelligence management system (AIMS).
  2. Regulatory milestoneEUEU AI Act: Parliament and Council reach provisional political agreementNegotiators struck a provisional deal on the AI Act on 8 December 2023, adding systemic-risk duties for powerful models and fines of up to 7% of global turnover.
  3. IncidentCredential exposureResearchers find 1,500+ exposed Hugging Face API tokens with write accessLasso Security found over 1,500 valid Hugging Face and GitHub tokens, some granting write access to Meta, Google, Microsoft and VMware AI repositories.

November 20233 entries

  1. Regulatory milestoneUKUK NCSC and US CISA publish Guidelines for Secure AI System DevelopmentOn 27 November 2023 the UK NCSC and US CISA published joint guidelines for building AI systems securely, endorsed by agencies from 18 countries.
  2. Regulatory milestoneUS FederalCISA releases its first Roadmap for Artificial IntelligenceCISA's November 2023 AI roadmap sets five lines of effort tying agency AI work to Executive Order 14110.
  3. Regulatory milestoneInternationalBletchley Declaration: 28 countries and the EU agree on frontier AI risksAt the UK AI Safety Summit on 1 November 2023, 28 countries and the EU endorsed the Bletchley Declaration on frontier AI risks, including cybersecurity.

October 20232 entries

  1. Regulatory milestoneUS FederalExecutive Order 14110 on safe, secure and trustworthy AI signedExecutive Order 14110, signed 30 October 2023, set a government-wide US approach to AI safety and security, including red-team reporting for foundation models.
  2. Regulatory milestoneInternationalG7 publishes the Hiroshima Process Code of Conduct for Advanced AI SystemsG7 leaders agree a voluntary code of conduct for developers of advanced AI systems, published 30 October 2023.

September 20231 entry

  1. IncidentCredential exposureMicrosoft AI research storage exposed through an overly permissive Azure SAS tokenMicrosoft disclosed on 18 September 2023 that a SAS token in a public GitHub repository for AI models had exposed an internal Azure storage account.

August 20231 entry

  1. Regulatory milestoneChinaChina's Interim Measures for generative AI services take effectChina's Interim Measures for the Management of Generative AI Services, issued 10 July 2023 by the CAC and six regulators, took effect on 15 August 2023.

July 20231 entry

  1. Regulatory milestoneChinaChina's CAC finalizes generative AI rules reaching overseas and API providersCAC's July 2023 finalized Interim Measures added a clause letting China act against overseas generative AI and API services reaching mainland users.

June 20231 entry

  1. Regulatory milestoneEUEuropean Parliament adopts its negotiating position on the EU AI ActOn 14 June 2023 MEPs backed amendments to the AI Act by 499 votes to 28, widening bans and high-risk lists before talks with member states began.

May 20231 entry

  1. IncidentData exposureSamsung restricts staff use of generative AI after sensitive data reached ChatGPTSamsung temporarily restricted generative AI tools on company devices from 1 May 2023 after reports that staff had uploaded sensitive code to ChatGPT.

April 20231 entry

  1. IncidentData exposureOpenAI's internal messaging systems breached in 2023, disclosed in 2024A hacker accessed OpenAI's internal messaging systems in 2023 and stole AI design details; the New York Times revealed the breach in July 2024.

March 20232 entries

  1. IncidentData exposureChatGPT outage and data exposure from a redis-py client bugOn 20 March 2023 a bug in the redis-py library let some ChatGPT users see other users' chat titles and, for some Plus subscribers, partial payment details.
  2. IncidentData exposureMeta's LLaMA model weights leak onto 4chan via BitTorrentA 4chan user posted a torrent of Meta's restricted-access LLaMA model weights, circumventing Meta's research-access approval process.

January 20232 entries

  1. Regulatory milestoneUS FederalNIST releases AI Risk Management Framework 1.0NIST released the voluntary AI Risk Management Framework 1.0 on 26 January 2023, built around four functions: govern, map, measure and manage.
  2. Regulatory milestoneChinaChina's Deep Synthesis Provisions take effect, regulating deepfake servicesChina's Administrative Provisions on Deep Synthesis of Internet Information Services took effect January 10, 2023, covering deepfake-style AI content.