Security teams remain overly committed to keeping humans in the loop and it isn’t a sustainable approach says Ashley Leonard.
Europe
Cyber security agencies from Australia, the US, the United Kingdom, and Canada have published new guidance to help critical infrastructure operators isolate vital operational technology (OT) and enabling systems during a major cyber incident or geopolitical crisis.
The Cloud Security Alliance has worked with the SANS Institute, RSAC, FIRST, [un]prompted, and Knostic to quickly develop a post incident review for the recent Hugging Face AI attack incident.
In a disaster scenario getting backups or secondary cloud environments online and functional in time to meet recovery point and recovery time objectives can be hard enough, but sometimes only represents half the challenge.
Although written from an insurance perspective, this recently published academic paper’s treatment of cloud concentration, correlated failure, and scenario calibration is highly transferable to operational resilience.
ASIS Foundation has published a new report exploring security culture, its development, and its role in developing resilience.
The quantum threat is global and a long-term resilience programme is needed in response. However, post-quantum cryptography migration timelines are fragmented, increasing the complexity of preparatory actions.
In what OpenAI describes as an unprecedented security incident, a combination of its advanced models escaped a highly restricted testing environment and compromised parts of Hugging Face’s production infrastructure.
Sophos has released its seventh annual ‘State of Ransomware 2026’ report, based on a survey of IT and cyber security leaders across 17 countries whose organizations had experienced ransomware during the previous 12 months.
Onyxia Cyber has published its third annual CISO research report, ‘Industry Divides: Uncovering the CISO’s Resilience Priorities Across Sectors’.