Dax Raad, CEO of anoma.ly, candidly critiques the current state of AI in organizations, stating that teams lack good ideas, workers are unmotivated, and AI is used to reduce effort rather than increase efficiency. He warns that bureaucratic hurdles persist, and high costs of LLM bills are a growing concern for CFOs.
https://www.reddit.com/r/ExperiencedDevs/comments/1r6olcv/an_ai_ceo_finally_said_something_honest/
AI adoption is outpacing security measures, per a Pentera survey of 300 U.S. CISOs. Key findings: 67% lack visibility into AI usage, 44% report lagging AI security, and major challenges include expertise shortages and reliance on outdated security controls. Despite funding for AI security, it lacks dedicated budgets, highlighting significant gaps in securing evolving AI systems amidst complex IT environments.
Cybersecurity demands collective resilience; companies must enhance operational resilience to withstand incidents. Effective recovery hinges on leaders' ability to assess risks, validate mitigations, and communicate rapidly.
https://hbr.org/2026/02/cybersecurity-requires-collective-resilience
Data minimization is an underrated security control that reduces the volume of sensitive data, thereby decreasing the impact of breaches and improving security operations. Despite organizations claiming to practice data minimization, the sheer volume of data often outpaces governance capabilities, thereby increasing risk. To effectively implement data minimization, organizations must challenge the “speculative” analytics mindset, audit data propagation, and automate retention processes.
https://www.databreachtoday.com/blogs/data-minimization-still-underrated-security-control-p-4049
Extreme TLDR: OpenClaw (formerly Clawdbot) is a viral AI agent posing severe insider threats, allowing command execution via chat platforms. It suffers vulnerabilities, insecure defaults, plaintext secrets, and malicious skills, compromising organizational security. Its design flaws hinder effective safeguarding.
https://www.kaspersky.com/blog/moltbot-enterprise-risk-management/55317/
AI agents in commerce raise complex compliance issues regarding transactional liability. With their adoption accelerating, traditional regulatory frameworks (such as PCI DSS, AML, and DORA) may struggle to keep pace, as compliance is hard to assign when AIs initiate payments. Financial institutions must proactively assess their compliance strategies for AI interactions to avoid future liability risks, particularly around transaction monitoring, script security, and operational resilience. Immediate steps include mapping integrations and recalibrating AML systems. Delayed action may lead to regulatory crises as compliance standards evolve.
https://www.finextra.com/blogposting/30917/when-ai-agents-pay-who-owns-the-compliance-liability
The EU AI Act, a global standard for AI regulation, requires organizations worldwide to address AI risks through governance, controls, and accountability. Internal auditors must adapt to this shift, auditing AI governance, risk classification, data quality, human oversight, and third-party AI risk to ensure compliance.
CISO roles face responsibility without authority, causing tension. Accountability exists but not equivalent decision-making power. Discussions include CISOs as risk advisors, the persistence of outdated security practices, and redefining employees from weakest links to strong allies. Experts stress the importance of adapting to new cybersecurity landscapes, emphasizing communication's role in enhancing security culture. Additionally, participants debate the severity of security breaches in public utilities versus logistics, ultimately favoring water supply threats as more impactful due to health implications.
https://cisoseries.com/we-gave-the-ciso-risk-and-liability-and-now-they-want-authority-the-nerve/
CISOs face unmanageable workloads as their responsibilities expand without corresponding resources, leading to burnout and ineffective leadership. Experts suggest reassessing the role by redistributing responsibilities and granting appropriate authority. This structural change aims to alleviate pressure and enable CISOs to focus on cyber risk management effectively, rather than being overwhelmed by a multitude of unrelated tasks.
Microsoft's Security Dashboard for AI, now in public preview, helps CISOs and AI risk leaders manage AI security by aggregating risk signals and providing tools for governance, inventory of AI assets, and risk context for better investigation and remediation.
https://www.helpnetsecurity.com/2026/02/16/microsoft-security-dashboard-for-ai-tool/
