CISA and FBI released guidance on protecting against Akira ransomware, targeting small and medium businesses. The advisory includes indicators of compromise and recommended actions for organizations, emphasizing swift measures for data protection.
Regulators are embracing AI, shifting from fear to demand as seen in frameworks like the EU AI Act and CSRD. These regulations embed automation into compliance, necessitating transparency and reliability. Companies relying on manual compliance are at a disadvantage, while early adopters of AI enhance data integrity and transparency. The focus has shifted to utilizing AI for efficient compliance, marking a new era where it becomes a fundamental asset for regulatory success.
https://www.techmonitor.ai/comment-2/ai-regulators-new-approach?cf-view
CISOs face increased responsibilities for AI security and data privacy, with 84% now overseeing AI security. Rapid AI adoption creates new vulnerabilities, requiring strategic crowd-sourced security approaches. Effective use of crowdsourcing leads to better detection and cost-effective solutions while addressing talent shortages in cybersecurity. Organizations must adopt a proactive security posture to future-proof against threats, integrating crowdsourced security as a vital strategy.
CISOs must prioritize comprehensive Software Bills of Materials (SBOM) because modern software is complex and relies heavily on third-party components, which can hide vulnerabilities. An SBOM provides full visibility into all software components, helping organizations assess risks and compliance. Incomplete SBOMs or lack of them from vendors can lead to exposure during cyber threats, exemplified by incidents like Log4Shell and SolarWinds. Maintaining SBOMs as living documents and integrating them into development lifecycles is essential for proactive risk management, necessitating cultural commitment and policy enforcement from software development leaders.
Companies seek improvements in threat intelligence platforms, citing issues with alerts’ accuracy, integration with tools, and information overload, according to Recorded Future’s report. Over half of enterprises use multiple services, with a notable demand for faster data delivery and tailored analysis. Despite issues, firms are enhancing their threat intelligence maturity, investing in comprehensive solutions and automated processes.
NIS2 Directive mandates corporate boards oversee cybersecurity as a governance issue, implementing duties for risk management, training, and incident response. Effective from 2024 in Italy, it holds boards accountable with fines up to €10M for non-compliance. The directive broadens its scope beyond critical infrastructure, imposing requirements on various sectors and emphasizing supplier cybersecurity scrutiny. Companies must integrate compliance strategies, adapt policies, and prepare for regulatory audits to safeguard trust and protect business integrity. Key deadlines include readiness for incident notifications by January 2026 and full compliance by October 2026.
https://www.hoganlovells.com/en/publications/nis2-cyber-governance-as-a-boardroom-matter
Credit unions face a dire cybersecurity crisis in 2025, with limited resources and increasing threats leading to potential collapse. Key issues include insufficient staffing and outdated security tools, resulting in a high breach impact of $8.2M per incident and slow detection times. The Seceon Platform offers a solution by integrating multiple security functions into one AI-driven system, enhancing compliance, reducing costs, and significantly speeding up threat detection. Urgent action is needed for credit unions to adopt modern cybersecurity practices to ensure their survival and member trust.
Cybersecurity threats are increasingly sophisticated, fueled by AI tools used by fraudsters. The FBI reported over $16 billion in internet crime losses for 2023, with data breaches costing average U.S. companies about $9.36 million. Organizations must adapt by enhancing cybersecurity practices, including prioritizing cyber hygiene, minimizing data, promoting interdepartmental collaboration, and refining financial procedures. As fraud tactics advance, businesses need comprehensive strategies to protect against evolving threats, emphasizing the importance of proactive measures and collaboration between cybersecurity and fraud prevention teams.
The EU Commission is planning targeted amendments to the AI Act, aiming to provide legal certainty for industries and reduce administrative burdens. These changes, part of a broader digital simplification package, are set for announcement in November and still need full Commission approval. While some industry leaders push for a pause to allow time for technical standards to be established, the Commission maintains its commitment to the AI Act’s core principles. However, a one-year grace period for enforcement is possible. Concerns persist that simplification efforts may compromise critical legal protections.
EU’s leaked GDPR reforms face backlash for aiding Big Tech, compromising user privacy with loopholes and weakening data protections. Privacy advocates warn it favors corporations over citizens, risking essential data rights. Proposed changes might lessen accountability for data misuse, affecting AI regulations and users’ access to their data. The reforms aim for administrative relief but could have global policy implications beyond Europe.
https://www.theregister.com/2025/11/11/eu_leaked_gdpr_ai_reforms/
