Blog

M365 Copilot Data Processing Goes Local to Meet Sovereignty Demands

Microsoft will process M365 Copilot data locally in 15 countries by utilizing regional data centers, addressing digital sovereignty concerns. The initiative begins in Australia, India, Japan, and the UK, expanding to other countries by 2026, aiming to enhance data governance and reduce latency for customers, especially in regulated industries.

https://www.computerworld.com/article/4085303/m365-copilot-data-processing-goes-local-to-meet-sovereignty-demands.html

To Boost AI Adoption, CIOs Lean on Training, Guardrails

CIOs focus on AI adoption balancing expansion and employee training. Many lack AI governance policies, with training access lagging. Executives emphasize clear use cases, tailored training, and risk management. Jabil's AI Council guides deployment; Deloitte integrates AI training in leadership programs, and Detroit's CIO prioritizes accuracy vigilance. Effective AI tools enhance productivity, shifting mundane tasks to automation.

https://www.hrdive.com/news/CIO-AI-adoption-jabil-deloitte-city-detroit/804735/

The AI Penetration Testing Lie: Why Human Expertise Remains Irreplaceable

AI cannot replace human expertise in penetration testing; it only automates tasks without the creativity needed for real security. Compliance testing has degraded to automated scans, misleading businesses about their security. AI tools are similar to vulnerability scanners and lack human adaptability and innovation. The best approach is a hybrid model, using AI for repetitive tasks but relying on humans for genuine threat emulation. Penetration testing is a crucial investment for security, promising significant ROI by preventing costly breaches.

https://aijourn.com/the-ai-penetration-testing-lie-why-human-expertise-remains-irreplaceable/

To Maximize Their Influence, CISOs Need Diverse Skills

CISOs must possess diverse skills to influence organizational strategy by effectively addressing cybersecurity as a business issue. Key requirements include understanding security technology, aligning cybersecurity with business goals, and communicating risks clearly to stakeholders. Modern CISOs need leadership skills to engage all employees in security practices and a risk-centric mindset to prioritize vulnerabilities. With increased cybersecurity threats, corporate executives are more receptive to CISOs, marking a significant shift in their role from solely tech leaders to strategic business partners.

https://www.techtarget.com/searchsecurity/tip/To-maximize-their-influence-CISOs-need-diverse-skills

Top 10 Countries That Have Payment Card Info Spilled Onto the Dark Web in 2025

Top 10 countries with card info on dark web in 2025: US (30,000+ cards), Singapore (5,400+), Spain (5,090+), UK (1,804+), Kuwait (1,518), France (722), Ireland (589), Canada (442), Germany (408), Cyprus (326). Stolen cards trading at low prices due to high supply and low-quality data. Most stolen details remain valid for 12-16 months, making them risky for consumers. Key security measures: monitor statements, use strong passwords, disable browser password saving, enable multi-factor authentication.

https://www.cybersecurity-insiders.com/top-10-countries-that-have-payment-card-info-spilled-onto-the-dark-web-in-2025/

How Agentic AI Could Turbocharge Fraud

Agentic AI could revolutionize online shopping but poses significant fraud risks. Payments professionals at Money 20/20 expressed concerns that criminals might exploit AI to execute scams more effectively. Programs like FraudGPT, available for subscription, could escalate fraud incidents by automating scams and creating synthetic identities. Executives highlighted challenges in verifying AI-driven transactions and the need for robust authentication processes to combat fraud as agentic AI technology becomes prevalent.

https://www.paymentsdive.com/news/how-agentic-ai-could-turbocharge-fraud-payments/804562/

Vulnerability-Lookup

Vulnerability-Lookup is a platform for security teams to track and manage vulnerabilities across products and vendors. It integrates multiple vulnerability databases, enabling users to correlate and manage vulnerabilities without relying on specific identifiers. Features include custom watch lists, an API, modular import systems, and support for Coordinated Vulnerability Disclosures (CVD). It is co-funded by CIRCL and the EU.

https://www.vulnerability-lookup.org/

Preparing for Threats to Come: Cybersecurity Forecast 2026

Cybersecurity Forecast 2026: Google Cloud's report focuses on upcoming cybersecurity threats, emphasizing AI's role in escalating cybercrime, with adversaries leveraging AI for more sophisticated attacks and social engineering. Key predictions include increased ransomware incidents, the growth of cyber operations from nation-states like Russia, China, Iran, and North Korea, and challenges in securing AI systems. Organizations are advised to adapt to these evolving threats, enhancing their security strategies in anticipation of 2026.

https://cloud.google.com/blog/topics/threat-intelligence/cybersecurity-forecast-2026/

The Great Decoupling of Labor and Capital

Extreme TLDR: Tech companies show decoupling of growth from employee count. Examples: Apple (60k for $100B), Alphabet (76k for $100B), Microsoft (124k for $100B), Meta (63k for $100B), Amazon with lower increases post-pandemic. Nvidia reached $100B with 30k. Walmart’s revenue grew with static headcount. The trend suggests future revenue growth needs fewer employees, driven by AI advancements, indicating a shift towards higher productivity with fewer workers.

https://www.mbi-deepdives.com/the-great-decoupling-of-labor-and-capital/

Scroll to Top