KPMG's ESG Assurance Maturity Index 2025 reports on ESG practices among 1,320 companies, highlighting regulatory shifts and the importance of proactive response to sustainability standards. The survey includes diverse regions and emphasizes that ESG assurance is a continuous journey requiring commitment.
https://kpmg.com/sg/en/insights/esg/esg-assurance-maturity-index-2025.html
This article lists 10 notable cybersecurity startups founded after 2020, each addressing trending security challenges and gaining rapid traction with enterprises and investors.
Highlighted Startups:
73% of U.S. CISOs experienced significant cyber incidents in the last six months, highlighting internal pressures rather than external threats as the main stressors. Burnout is prevalent, with 87% reporting increased role pressure. Many struggle with managing numerous security tools and face board expectations exceeding their ability to quantify risk. Nagomi Security's CISO Pressure Index reveals the need for shared accountability and support for CISOs to navigate these challenges effectively.
Cybersecurity is rapidly evolving from reactive responses to proactive prevention as advances in AI enable attacks to occur much faster. Instead of only responding to incidents, the new focus is on detecting early signals—like new domains or infrastructure—that may indicate an impending attack and neutralizing threats before they develop. This shift has led to the development of new metrics that measure how quickly organizations can preempt threats. Both attackers and defenders are leveraging AI to stay ahead, with startups like Malanta designing systems to discover and dismantle potential attacks at the earliest stage. The industry sees prediction and early intervention as key to future cybersecurity.
Microsoft apologized for misleading M365 users regarding non-AI subscription options after facing legal action from Australia’s ACCC. Users were directed to pricier AI bundles without clear information about cheaper “Classic” plans. Microsoft promised refunds for those opting to downgrade and acknowledged communication shortcomings.
https://www.theregister.com/2025/11/06/microsoft_copilot_m365_apology/
Microsoft will process M365 Copilot data locally in 15 countries by utilizing regional data centers, addressing digital sovereignty concerns. The initiative begins in Australia, India, Japan, and the UK, expanding to other countries by 2026, aiming to enhance data governance and reduce latency for customers, especially in regulated industries.
CIOs focus on AI adoption balancing expansion and employee training. Many lack AI governance policies, with training access lagging. Executives emphasize clear use cases, tailored training, and risk management. Jabil's AI Council guides deployment; Deloitte integrates AI training in leadership programs, and Detroit's CIO prioritizes accuracy vigilance. Effective AI tools enhance productivity, shifting mundane tasks to automation.
https://www.hrdive.com/news/CIO-AI-adoption-jabil-deloitte-city-detroit/804735/
AI cannot replace human expertise in penetration testing; it only automates tasks without the creativity needed for real security. Compliance testing has degraded to automated scans, misleading businesses about their security. AI tools are similar to vulnerability scanners and lack human adaptability and innovation. The best approach is a hybrid model, using AI for repetitive tasks but relying on humans for genuine threat emulation. Penetration testing is a crucial investment for security, promising significant ROI by preventing costly breaches.
https://aijourn.com/the-ai-penetration-testing-lie-why-human-expertise-remains-irreplaceable/
EU launches code for marking AI-generated content, tackling misinformation. Transparency rules enforce clear labeling by 2026, enhancing public trust.
CISOs must possess diverse skills to influence organizational strategy by effectively addressing cybersecurity as a business issue. Key requirements include understanding security technology, aligning cybersecurity with business goals, and communicating risks clearly to stakeholders. Modern CISOs need leadership skills to engage all employees in security practices and a risk-centric mindset to prioritize vulnerabilities. With increased cybersecurity threats, corporate executives are more receptive to CISOs, marking a significant shift in their role from solely tech leaders to strategic business partners.
https://www.techtarget.com/searchsecurity/tip/To-maximize-their-influence-CISOs-need-diverse-skills
