Microsoft Teams introduces a “Prevent screen capture” feature for Premium users, blocking screenshots and recordings during meetings on Windows and Android. The feature is off by default and requires manual activation. Despite restrictions, sensitive content can still be photographed.
C-suite executives often use unapproved AI tools despite established guidelines, with over two-thirds admitting recent use of such tools, leading to security challenges. Employees also bypass rules, with some processing sensitive data through unauthorized AI. This trend, driven by the need for speed and ineffective tools, is creating significant organizational risks.
https://www.ciodive.com/news/executive-AI-tool-use-nitro/805417/
Citizen developers enhance productivity via AI automation but pose risks through unmanaged vulnerabilities, limited visibility, and compliance issues. Traditional security tools fail to monitor these automations effectively, leading to “security debt.” A structured approach that includes inventorying automations, enforcing least privilege access, and integrating security checks is essential to mitigate risks and maintain compliance while fostering innovation.
https://www.scworld.com/perspective/how-to-manage-the-growing-influence-of-citizen-developers
Legal battle over credit card swipe fees ends after 20 years, resulting in reduced fees that benefit merchants and consumers. Visa and Mastercard will lower fees and maintain stability for years, promoting competition and innovation in the payment system while ensuring consumers retain credit card rewards and protections. The settlement provides clarity and confidence for financial systems, demonstrating effective public policy balance.
https://thehill.com/opinion/finance/5602073-visa-mastercard-swipe-fees/
Organizations are increasingly adopting passwordless authentication methods like SSO and passkeys due to ongoing weak password habits and the limitations of password-based and basic MFA solutions. Surveys indicate a significant shift, as most CISOs report implementing or planning to implement these technologies, which promise improved security, a lower risk of phishing, and a better user experience. Still, many organizations face challenges such as limitations of legacy systems, user resistance, and high costs, which slow down widespread adoption.
https://www.darkreading.com/identity-access-management-security/sso-passkeys-password-bad-habits
CISA and FBI released guidance on protecting against Akira ransomware, targeting small and medium businesses. The advisory includes indicators of compromise and recommended actions for organizations, emphasizing swift measures for data protection.
Regulators are embracing AI, shifting from fear to demand as seen in frameworks like the EU AI Act and CSRD. These regulations embed automation into compliance, necessitating transparency and reliability. Companies relying on manual compliance are at a disadvantage, while early adopters of AI enhance data integrity and transparency. The focus has shifted to utilizing AI for efficient compliance, marking a new era where it becomes a fundamental asset for regulatory success.
https://www.techmonitor.ai/comment-2/ai-regulators-new-approach?cf-view
CISOs face increased responsibilities for AI security and data privacy, with 84% now overseeing AI security. Rapid AI adoption creates new vulnerabilities, requiring strategic crowd-sourced security approaches. Effective use of crowdsourcing leads to better detection and cost-effective solutions while addressing talent shortages in cybersecurity. Organizations must adopt a proactive security posture to future-proof against threats, integrating crowdsourced security as a vital strategy.
CISOs must prioritize comprehensive Software Bills of Materials (SBOM) because modern software is complex and relies heavily on third-party components, which can hide vulnerabilities. An SBOM provides full visibility into all software components, helping organizations assess risks and compliance. Incomplete SBOMs or lack of them from vendors can lead to exposure during cyber threats, exemplified by incidents like Log4Shell and SolarWinds. Maintaining SBOMs as living documents and integrating them into development lifecycles is essential for proactive risk management, necessitating cultural commitment and policy enforcement from software development leaders.
Companies seek improvements in threat intelligence platforms, citing issues with alerts’ accuracy, integration with tools, and information overload, according to Recorded Future’s report. Over half of enterprises use multiple services, with a notable demand for faster data delivery and tailored analysis. Despite issues, firms are enhancing their threat intelligence maturity, investing in comprehensive solutions and automated processes.
