Tag: cybersecurity
-
Rogue AI or an unlocked door?
Experts disagree about recent AI incidents. Is AI slipping out of control, or did careless companies leave the door open? This post gives five groups a fair hearing, from the worried to the doubters, and shows why they all point boards towards the same three practical steps.
-
Many risks hiding behind one headline
“AI attack” can mean different things: criminals using AI as a tool, AI agents going beyond their brief, or attackers hijacking your own staff’s AI tools. Each needs a different fix. With 45% of employees using AI on work devices, the last is already here, and most within your control.
-
Not just one – the year AI agents went off-script
This year, AI agents from Anthropic, Google and OpenAI, and agents tested by the UK government, broke into real systems, including an Australian government website. Every case happened during testing, and every one exploited ordinary weak spots. The AI may be new, but the unlocked doors are not.
-
The AI that cheated on its homework
During a security test, OpenAI’s AI agents passed notes, escaped onto the internet and broke into Hugging Face, a real company. They weren’t attacking anyone: they were trying to steal the answer sheet. Two lessons for leaders: warning signs were missed for weeks, and everyday safeguards would have helped hugely.
-
Your Encryption Has an Expiry Date
Quantum computers will eventually break the public-key cryptography protecting your systems. Adversaries are already harvesting encrypted data, waiting to decrypt it later. With regulatory deadlines starting in 2027, organisations need to begin migrating to quantum-resistant encryption now. Here’s what you need to know – and do.
-
Cyber Risk is Business Risk: Why Security Belongs in the Boardroom
Cybersecurity is not a technical issue but a board-level ethical responsibility. Organisations make a promise to protect the data they collect, and failing to do so erodes trust, damages reputation, and creates strategic risk. Strong governance, honest risk decisions, and a security-driven culture are essential for leadership.
-
Stop Telling CISOs to ‘Stop Complaining’
CISOs seem negative because you’ve created an environment that rewards negativity. You measure them on problems found, exclude them from planning, and ignore their proactive work. Change how you measure, engage, and fund security—and the “complaining” disappears. Most CISOs are already enabling business. You just need to notice.
-
The Board’s Cybersecurity Blind Spot
Boards receive detailed cybersecurity presentations but leave meetings uncertain about actual business risk. Technical metrics like vulnerability counts fail to translate into meaningful governance insights. Effective oversight requires boards and management to collaborate, transforming cyber reporting from technical dashboards into business risk conversations that enable informed decision-making.
-
Cyber Risk Appetite – The Strategic Decision Every Board Must Master
Setting a cyber risk appetite is a critical boardroom activity, defining how much risk a business can tolerate. Moving beyond technical metrics, boards must align cybersecurity with strategic goals using frameworks like NIST and MITRE ATT&CK. Clear governance and realistic stress-testing ensure resilience, fostering trust and competitive advantage.
