Organisations Need to Ask Vendors for Their Homework
In early April 2026, Microsoft open-sourced an Agent Governance Toolkit and published a document mapping its own controls against allmore...
In early April 2026, Microsoft open-sourced an Agent Governance Toolkit and published a document mapping its own controls against allmore...
Regulating AI is a major issue in government halls worldwide, but legislators’ distinct lack of technical competence is hampering the effort. A less technical solution may exist. It has existed for more than a century; it requires little or no further legislation, and it could result in criminal charges against the CEOs of AI platforms.
(Note: senior executives at AI companies including Anthropic, Open AI and C3 AI were contacted for comment. None responded to the requests.)
TL;DR
License AI use like cars
Holding companies responsible
Groundwork already laid
Doctrine of reasonable care
Let’s begin with automotive use. Virtually every country requires licensing of drivers and registration of vehicles.
Read more...It’s no secret that traditional cybersecurity approaches are under pressure. With AI-driven cyberattacks up 56% in the last year, businesses must adapt quickly to avoid being caught off guard.
Is AI damaging collaboration between coders?
We put this question out to the cybersecurity community a few weeks ago and the simple answer to the question is yes and no. The breach of GitHub earlier this year did some damage to the platform, more reputation ally than functionally. Big users abandoned it for other Git platforms and usage has dropped dramatically over the ensuing months. The good news is the damage was identified in minutes and mitigated quickly, after putting the fear of god into developers.
What was less reported though were simultaneous attacks by the same hackers on virtually every popular developer operations (DevOp) platform. GitLab, not just GitHub, and BitBucket were hit at the same time. By July, Jira and Confluence were discovered compromised. GitHub claimed there was no degradation in uptime, but independent monitoring showed a decline to 86%. As a comparison, AWS’ S3 operates at 99.999999999% up time or “eleven nines”, while GitHub’s own reports show nine nines this year.
AI at the core
The impact of this change is entirely the result of AI use. The hackers employed customized AI agents, breached Github and stolen 3,800 of its internal repositories. They poisoned a popular VS Code extension called Nx Console, pushed the malicious version to the Visual Studio Marketplace, and let auto-update distribute it. The compromised version was live for just 18 minutes, but that was enough.
In Jefferson, GA, a police chief in a neighboring town ran roughly 600 searches on a woman and her daughter’smore...
As organisations race to adopt AI, they are also facing an unprecedented wave of regulation. GDPR, NIS2, DORA and the upcoming Cyber Security & Resilience Bill are all demanding greater accountability and governance from businesses.
In 2025, adults 60 and older lost $7.7 billion to fraud, according to the FBI’s Internet Crime Complaint Center.…
Read more...Black Hat USA kicked off over the weekend and company announcements followed the marketing focus on agentic AI products and services. However, there was more hash than corned beef in these announcements. Most were repackaged current product offerings.
A handful of announcements targeted at Black Hat focused on AI-generated or agentic threats. Most of the announcements repeated announcements prior to the RSA conference,for "agentic AI security" marketing. These include Tenable, Bedrock Data, Cycode, LimaCharlie, Flint AI, GTB Technologies, Strike48, Alice, Menlo Security and Adaptive Security.
Among more interesting legitimate announcements were Backslash Security, and Lineaje.
houlder surfing is probably the easiest security vulnerability to overcome, except to the companies selling solutions for it. In fact, there has been a lively debate CSO Online over whether those who buy a solution might not be intelligent enough to use digital tools.
The miasma of mendacity and misinformation in President Trump’s July address, showed he is at least as clueless about electionmore...