Kiteworks has released its 2026 Data Security and Compliance Risk: Data Sovereignty Report, a cross-regional survey of risk management, compliance, IT, and security professionals that reveals a striking data sovereignty disconnect.
Risk
Enterprise risk management and operational risk management news, articles, research, and reports.
Black Duck has released the 2026 Open Source Security and Risk Analysis (OSSRA) report, which highlights the largest increases in open source security, licensing, and operational risk since the report’s inception 11 years ago.
Salt Security is warning that the new Moltbook platform, which recently hit the headlines in global media, and OpenClaw (formerly Clawdbot) agent framework offer a real-world preview of the next major enterprise security blind spot.
Sophos has released the 2026 Sophos Active Adversary Report. The findings highlight how attackers continue to exploit compromised credentials, weak or missing multifactor authentication, and poorly protected identity systems…
Simon Pamplin highlights that, while the timing of a ‘cryptographically relevant quantum machine’ remains uncertain, preparation cannot be deferred. Adopting crypto agility is a critical step in strengthening long-term resilience.
Attackers are increasingly bypassing MFA not by breaking technology, but by overwhelming users. Michael Downs looks at the issue and what organizations can do to reduce risk and strengthen resilience.
Gartner, Inc., has issued a prediction that, by 2028, misconfigured AI in cyber physical systems (CPS) will shut down national critical infrastructure in a G20 country.
Strategic discussions about AI often centre on workforce restructuring and automation. A more immediate enterprise risk is emerging: failure to design effective human-in-the-loop (HiTL) operating models.
Daoud Abdel Hadi examines how rising regulatory scrutiny is pushing banks and other financial institutions to embed explainability and accountability into AI-driven compliance systems.
Cloudflare has released its quarterly DDoS threat report for Q4 2025, highlighting the latest global attack trends and insights.