Blog

Europe Is Scaling Back Its Landmark Privacy and AI Laws

/ , , ,

Europe is reducing protections in its privacy and AI laws due to pressure from Big Tech and the US government. The EU plans to simplify GDPR regulations, moderate AI rules, and make it easier for companies to use personal data for AI training, aiming to foster innovation and economic growth. This includes reducing cookie pop-ups and centralizing AI oversight while facing criticism for potentially weakening user safeguards. The proposal will undergo scrutiny in the European Parliament and among member states, likely leading to significant debate and modification.

https://www.theverge.com/news/823750/european-union-ai-act-gdpr-changes

CIOs Are Being Lumped With AI Responsibilities

/ ,

CIOs are increasingly tasked with AI responsibilities, reflecting a shift to large-scale AI deployment, though many struggle with inadequate security processes. While collaboration with the C-suite is improving, integration with data teams remains weak. Despite these challenges, most CIOs feel confident in adapting to their changing roles, seeking better support for AI initiatives and security collaboration.

https://www.techradar.com/pro/cios-are-being-lumped-with-ai-responsibilities-and-many-of-them-arent-happy-with-that

How Docusign CISO Michael Adams Plans to Push Back Against Fraud

/ ,

Docusign’s CISO, Michael Adams, emphasizes security in their products, launching a verification email for forwarded messages to combat fraud as malicious actors exploit the platform. Docusign’s new “trust and safety team” and tools like AI risk scoring enhance defenses, addressing user vulnerabilities during phishing attempts. This initiative marks a significant step in improving trust checkpoints within the industry, as other vendors are encouraged to adopt similar measures.

https://www.itbrew.com/stories/2025/11/19/how-docusign-ciso-michael-adams-plans-to-push-back-against-fraud

Deforestation: Council Ready to Start Talks With Parliament on a Targeted Revision of the Regulation

/ ,

Council adopted a negotiating mandate to revise the EU deforestation regulation, aiming to simplify implementation and postpone deadlines. New application dates are 30 December 2026 for large operators and 30 June 2027 for smaller ones. A review will assess impacts on operators, especially smaller ones, and negotiations with Parliament will proceed for final agreement.

https://www.consilium.europa.eu/en/press/press-releases/2025/11/19/deforestation-council-ready-to-start-talks-with-parliament-on-a-targeted-revision-of-the-regulation/

Countries Use Cyber Targeting to Plan Strikes: Amazon CSO

/ ,

Amazon’s security chief warns hostile nations use cyber operations for scouting targets before physical attacks, endangering companies unaccustomed to being targeted. Organizations must integrate digital and physical security and rethink risk management, as cyber reconnaissance links to military actions. Examples include Iranian and Russian operations using hacked surveillance for military planning. Firms must understand the interplay between their physical and cyber domains to mitigate risks effectively.

https://www.theregister.com/2025/11/19/amazon_cso_warfare_cyber_kinetic/

Our CIO on Why Security Must Be Built Into AI From Day One

/ ,

The CIO of Palo Alto Networks stresses that security must be built into AI solutions from the start rather than added at the end. AI’s value comes from increased speed, efficiency, and improved user experiences, but rapid adoption introduces new vulnerabilities. At Palo Alto Networks, integrating security into the AI-driven transformation, such as automating IT support and rethinking the development lifecycle, enabled both agility and protection. Critical security measures include scanning models, managing access, and ensuring runtime safety. Ultimately, only organizations that embed security as a design principle will adapt rapidly and securely to the new AI landscape.

https://www.paloaltonetworks.com/blog/2025/11/cio-why-security-must-be-built-into-ai/

The EU Promised to Lead on Regulating Artificial Intelligence. Now It’s Hitting Pause.

/ , ,

EU is delaying AI regulations by at least a year due to pressure from the U.S. and tech companies, abandoning its goal of being a regulatory leader. The decision follows lobbying from tech industry and governments, as concerns about losing competitiveness grow. Proposed changes will exempt some companies from regulations and extend compliance timelines, prompting criticism over potential erosion of fundamental rights.

https://www.politico.eu/article/the-eu-wanted-to-lead-on-regulating-ai-now-its-hitting-pause/

How to Scale Distributed Product Teams From 10 to 100+

/ ,

Scaling Distributed Product Teams (2025)
Challenges: Transitioning from small to large teams requires significant mindset shifts.
Stages:
1. 10 to 30 People: Establish squad structures, decision-making frameworks, and playbooks.
2. 30 to 75 People: Introduce tribes and chapters, prioritize asynchronous communication, and define team interfaces.
3. 75 to 150+ People: Add management layers, implement objective frameworks, and invest in productivity tools.
Hiring: Standardize interviews and focus on culture add.
Communication: Adjust patterns as team sizes change; utilize tools for effective collaboration.
Culture: Maintain through clear values, rituals, and feedback systems.
Common Pitfalls: Avoid rapid hiring, neglecting tech debt, and losing mission focus.
Metrics: Track velocity, cycle time, quality, engagement, and hiring efficiency.
Conclusion: Successful scaling is about enabling teams through structure and culture, not just increasing headcount.

https://intelligentfuturetech.com/blog/scaling-distributed-product-teams-2025/

Breaking Down S3 Ransomware: Variants, Attack Paths and Trend Vision One™ Defenses

/ , ,

Ransomware actors are increasingly shifting focus from on-premises systems to cloud assets, particularly Amazon S3 buckets. They exploit misconfigured access controls, weak permissions, and cloud-native features to target mission-critical backups, storage, databases, and container images. Five primary S3 ransomware variants include the use of attacker-controlled KMS keys, customer-supplied encryption (SSE-C), mass data exfiltration and deletion, external KMS key material, and external key stores (XKS). Attackers favor buckets without versioning, object lock, or MFA Delete, often accessing them via overly broad IAM roles or leaked credentials. Trend Vision One™ helps detect these threats by analyzing CloudTrail logs and performing posture checks. Proactive defense includes strict permissions, enabling immutability features, isolating backups, restricting the use of custom keys, automated monitoring, and regular recovery tests. AWS supports customers via guided best practices and policy enforcement.

https://www.trendmicro.com/en_us/research/25/k/s3-ransomware.html

Rethinking Identity for the AI Era: CISOs Must Build Trust at Machine Speed

/ ,

CISOs face a major identity crisis due to rising autonomous AI agents that challenge traditional identity management systems. Current models, designed for human users, risk collapse amid increasing cyber threats tied to compromised identities. Experts urge a swift overhaul toward an AI Trust Fabric, emphasizing dynamic identity management to counter AI-related risks, including prompt injection and data poisoning. Preparing for these challenges requires solid cybersecurity practices, governance, and collaboration with decision-makers to ensure effective management of AI-driven identity processes.

https://www.csoonline.com/article/4089732/rethinking-identity-for-the-ai-era-cisos-must-build-trust-at-machine-speed.html

Scroll to Top