Federal regulators intensify oversight of generative AI safety protocols
The Federal Trade Commission has launched a formal investigation into Anthropic and OpenAI, citing concerns over deceptive model behavior and public safety.

The digital landscape, it seems, is forever in a state of accelerated evolution, each new technological frontier echoing the last, yet moving at an ever-increasing clip.
Just as cloud computing once promised liberation from capital expenditure, only to usher in a prolonged “teething period” of security and scalability woes, so too does artificial intelligence now find itself in a similar, albeit far more rapid, adolescence.
The initial thrill of generative AI, epitomized by the public arrival of ChatGPT in late 2022, has quickly morphed into a corporate imperative, yet the underlying infrastructure to manage its immense power often lags dangerously behind.
A recent F5 report, the 2025 State of AI Application Strategy Report, paints a telling picture.
While a commendable two-thirds of organizations now claim “moderate AI readiness,” the devil, as always, is in the details. The vast majority, it reveals, are woefully unprepared when it comes to robust governance and cross-cloud management, particularly concerning performance, integration, and, most critically, security. This isn’t merely a technical oversight; it’s a systemic vulnerability.
The root of the problem might well lie in AI’s current perceived role: an experimental tool, a source of quirky image generation, or a sophisticated chatbot.
This consumer-driven familiarity, while democratizing access, has perhaps fostered a premature sense of comfort with incredibly powerful technologies that, in a corporate context, demand stringent control.
It’s a paradox: 71% of organizations are leveraging AI to boost security, yet a mere 31% have deployed AI firewalls. This chasm between aspiration and practical defense is precisely where the real risks fester.
François Locoh-Donou, F5’s president and CEO, recently articulated this escalating complexity with a vivid analogy.
Speaking in London, he described how organizations, particularly large enterprises and government entities, have seen system security become a “ball of fire” over the past two decades.
This inferno, he explained, is fueled by the fragmented reality of multi-cloud and datacenter estates, combined with modern applications composed of countless APIs and microservices. Each point solution, deployed incrementally to solve a specific problem, only adds more kindling to the blaze, making total systems management an intractable nightmare.
The arrival of AI, inherently distributed and often calling on data models from disparate sources, only intensifies this inferno.
“My view on this is that AI is being deployed so rapidly that we really should have looked more closely at what happened in the first decade of cloud computing,” Locoh-Donou warned, highlighting the “massively exponentially faster” pace of AI adoption.
Generative AI, he posited, might well be the “most sensitive vulnerability” organizations face today, introducing a whole new raft of security considerations, from prompt injection attacks to the insidious threat of AI hallucination.
F5’s response to this growing inferno is a strategic pivot towards a comprehensive, single-platform approach, aiming to deliver and secure applications across on-premises, public cloud, and edge environments without forcing organizations into a labyrinth of disparate infrastructures.
This isn’t just about fighting fire with fire; it’s about building a robust firebreak.
Their F5 Application Delivery and Security Platform is now being deeply engineered to empower CIOs, CISOs, and DevOps teams to manage the intricate dance of infrastructure, data movement, and security in hybrid multicloud environments.
Key to this strategy are new AI-driven capabilities, including the F5 AI Gateway service, designed specifically to protect against data leaks.
Acting as a crucial piece of middleware, this gateway inspects and validates data prompts between AI models and the large language models they serve, laying down the law to ensure efficient, secure, and responsible AI usage.
Complementing this, updates to the F5 BIG-IP SSL Orchestrator allow for the classification and defense of encrypted data in motion, crucially blocking unauthorized AI use – the “shadow AI” that often operates unseen, creating dangerous security blind spots.
The recent acquisition of LeakSignal, a data governance and protection specialist, further underscores F5’s commitment.
Its technology, recognized by the National Institute of Standards and Technology, will power the AI Gateway’s data leakage detection and prevention capabilities, allowing it to examine AI prompts and responses for sensitive data, applying customer-defined policies to redact, block, or log it in real-time.
This is a critical step in simplifying compliance and mitigating risk across complex deployments.
Beyond data leakage, F5 is also infusing AI into its application delivery controller technologies, aiming to simplify app delivery through natural language interfaces.
Even the perennial problem of “alarm fatigue” for administrators, overwhelmed by countless alerts, is being tackled through the acquisition of Fletch.ai, which uses AI to triage alerts and point administrators to critical issues.
Yet, F5 operates in a fiercely competitive arena.
Giants like Kong, Cloudflare, Akamai, and the hyperscalers – Google Cloud, Microsoft Azure, and AWS – all vie for dominance in API management, security, and AI gateway functionality.
These major cloud players, with their ability to bundle a myriad of services, present a formidable challenge, potentially luring IT managers with integrated, albeit less specialized, alternatives.
The stakes are immense.
As data flows in transit, in real-time, and across every tier of application execution, the surface area for attack expands exponentially.
The central question remains: can the “safe and securely protected AI” space grow at the same breakneck speed as the wider AI landscape itself?
Or will the industry, once again, find itself playing catch-up, battling a ball of fire that threatens to consume the very innovation it seeks to harness?
The answer will define the security posture of the next digital era.
The Federal Trade Commission has launched a formal investigation into Anthropic and OpenAI, citing concerns over deceptive model behavior and public safety.
New research highlights how opportunistic infostealer malware is exploiting browser-based password managers to compromise corporate credentials at an unprecedented scale.
The expansion introduces agentic decision flows to bolster investigative capabilities for a national security agency in the EMEA region.