EU Parliament delays Deforestation Regulation (EUDR) rollout to late 2026, facing legislative battles. Simplifications for small operators added amid IT issues. Urgent review scheduled for late November; critics emphasize need for immediate policy implementation to combat deforestation.
https://woodcentral.com.au/eu-parliament-fast-tracks-12-month-delay-to-deforestation-law/
Amit Chadha, CEO of L&T Technology Services, emphasizes that modern CIOs should blend an engineering mindset—focusing on durability, redundancy, and scalability—with the fast-moving world of software and automation. He notes that AI and automation enable both speed and longevity in IT systems, and CIOs must also consider the physical infrastructure on which their software relies. As technology becomes more autonomous, workforce training and integrated, connected systems are needed. Chadha warns against over-reliance on abstractions, urging CIOs to ground decisions in physical realities and design for potential failures.
https://www.informationweek.com/it-leadership/speed-meets-durability-the-engineering-cio-mindset
TLDR: A recent UpGuard report reveals over 80% of employees, especially in healthcare and finance, use unapproved AI tools, with many trusting AI more than colleagues. Executives lead in usage, raising security concerns, as understanding AI risks correlates with increased unauthorized tool usage. Less than half of employees are aware of company AI policies, despite many recognizing data sharing issues.
https://www.cybersecuritydive.com/news/shadow-ai-employee-trust-upguard/805280/
Shadow AI poses significant security risks for companies due to unsanctioned use of AI tools, potentially leading to data leakage, compliance violations, and operational vulnerabilities. The rise of generative AI has prompted employees to adopt personal AI applications, often without IT oversight, which can expose sensitive information and introduce exploitative bugs. Organizations must recognize shadow AI's prevalence, enforce acceptable use policies, educate employees, and implement monitoring tools to mitigate risks while fostering productivity.
https://www.welivesecurity.com/en/business-security/shadow-ai-security-blind-spot/
The article warns that organizations are repeating cybersecurity’s historic mistakes with AI by treating quality assurance as an afterthought. Traditional software testing fails to catch many AI issues because AI systems behave unpredictably and can produce different results each time. Effective AI testing requires diverse human testers, specialized red teaming to identify behavioral flaws, and ongoing monitoring to detect new biases and failures as AI systems and societal contexts evolve. Relying solely on automated tools or conventional testing leaves organizations vulnerable to costly, sometimes silent AI failures that undermine trust and can have more severe consequences than past security breaches.
https://thenewstack.io/were-repeating-cybersecuritys-big-mistake-this-time-with-ai/
Microsoft Teams introduces a “Prevent screen capture” feature for Premium users, blocking screenshots and recordings during meetings on Windows and Android. The feature is off by default and requires manual activation. Despite restrictions, sensitive content can still be photographed.
C-suite executives often use unapproved AI tools despite established guidelines, with over two-thirds admitting recent use of such tools, leading to security challenges. Employees also bypass rules, with some processing sensitive data through unauthorized AI. This trend, driven by the need for speed and ineffective tools, is creating significant organizational risks.
https://www.ciodive.com/news/executive-AI-tool-use-nitro/805417/
Citizen developers enhance productivity via AI automation but pose risks through unmanaged vulnerabilities, limited visibility, and compliance issues. Traditional security tools fail to monitor these automations effectively, leading to “security debt.” A structured approach that includes inventorying automations, enforcing least privilege access, and integrating security checks is essential to mitigate risks and maintain compliance while fostering innovation.
https://www.scworld.com/perspective/how-to-manage-the-growing-influence-of-citizen-developers
Legal battle over credit card swipe fees ends after 20 years, resulting in reduced fees that benefit merchants and consumers. Visa and Mastercard will lower fees and maintain stability for years, promoting competition and innovation in the payment system while ensuring consumers retain credit card rewards and protections. The settlement provides clarity and confidence for financial systems, demonstrating effective public policy balance.
https://thehill.com/opinion/finance/5602073-visa-mastercard-swipe-fees/
Organizations are increasingly adopting passwordless authentication methods like SSO and passkeys due to ongoing weak password habits and the limitations of password-based and basic MFA solutions. Surveys indicate a significant shift, as most CISOs report implementing or planning to implement these technologies, which promise improved security, a lower risk of phishing, and a better user experience. Still, many organizations face challenges such as limitations of legacy systems, user resistance, and high costs, which slow down widespread adoption.
https://www.darkreading.com/identity-access-management-security/sso-passkeys-password-bad-habits
