The AI Reckoning: No ROI, New Rules, and Security Holes You Haven't Measured

Three stories this week — all connected by a single thread: the winners in AI won't be the fastest movers, they'll be the most deliberate ones.

56% of CEOs report zero ROI from AI investments. A wave of federal and state regulation hits next week. And Zscaler's latest research found critical security vulnerabilities in 100% of enterprise AI systems tested — with a median time to first breach of 16 minutes.

Stephen Forte breaks down why most companies are spending without measuring, how the regulatory patchwork affects mid-sized businesses, and what real-world AI security breaches at Samsung, McDonald's, and Slack mean for your company.

1. The AI ROI Crisis

1. PwC 29th Annual Global CEO Survey — 56% report neither higher revenues nor lower costs from AI
2. MIT Generative AI Divide Study — 95% of enterprise AI pilots deliver no measurable P&L impact
3. McKinsey — only 1% of organizations consider themselves mature in AI deployment
4. Actionable framework: consume-configure-build hierarchy, measurable outcomes before launch, rebalance the 93/7 tech-to-people spend ratio

2. March 11 Federal AI Regulatory Deadline

1. Commerce Department must publish list of "onerous" state AI laws
2. FTC must issue federal preemption policy statement
3. State-level impact: Colorado AI Act (June 30), California SB-53 (already in effect), Texas RAIGA, EU AI Act Phase 2 (August 2)
4. Practical advice: build compliance around the strictest standard; cyber insurers now conditioning coverage on AI governance

3. Enterprise AI Security Vulnerabilities

1. Zscaler ThreatLabz 2026 AI Security Report — 100% of enterprise AI systems had critical vulnerabilities
2. Samsung — engineers leaked proprietary chip design source code via ChatGPT
3. McDonald's — 64 million job applicant records exposed through AI recruitment chatbot
4. Slack AI and n8n — prompt injection and critical sandbox escape vulnerabilities
5. 18,033 TB of corporate data flowing to AI platforms (93% YoY increase)

1. PwC 29th Annual Global CEO Survey (2026)
2. MIT Generative AI Divide Study
3. McKinsey AI Maturity Assessment
4. BCG AI Radar 2026
5. Forrester AI Profitability Impact Report
6. Colorado AI Act (SB 24-205)
7. California SB-53 Frontier AI Safety Act
8. Texas RAIGA (Responsible AI Governance Act)
9. EU AI Act Phase 2
10. Zscaler ThreatLabz 2026 AI Security Report
11. Samsung ChatGPT Data Leak (2023)
12. McDonald's/Paradox AI Recruitment Breach (2025)