Cyberattacks Highlight Urgent Need for Zero Trust Security

By / Blog / ,

Cyberattacks, like the disruption at Marks & Spencer, signal a crucial need for Zero Trust security as traditional password practices fail against evolving threats. Experts emphasize identity-focused cybersecurity, advocating for preemptive measures and multi-factor authentication. A trend toward identity-based attacks highlights the inadequacy of legacy defenses. Analysts stress the importance of AI-driven approaches for real-time threat detection and rapid response to minimize damage and restore trust. Organizations are urged to invest in integrated strategies to remain resilient against increasingly sophisticated cyber challenges.

https://securitybrief.co.uk/story/cyberattacks-highlight-urgent-need-for-zero-trust-security

Age Verification in the European Union: The Commission’s Age Verification App

By / Blog / ,

EU's Age Verification App aims to verify users' ages via digital wallets but poses privacy and accessibility concerns. It relies on various methods (eIDs, biometric data), but many marginalized groups may be excluded, risking their access to online services. Privacy measures in the app are not mandatory, and the reliance on zero-knowledge proofs and verification regulations may not adequately protect user data. The initiative could hinder democratic access while attempting to safeguard children online. More robust regulations and equitable access solutions are needed.

https://www.eff.org/deeplinks/2025/04/age-verification-european-union-mini-id-wallet

Digital Identities and the Future of Age Verification in Europe

By / Blog / ,

EU age verification trends push digital identities for user safety, but raise privacy concerns. Proposals may mandate age checks, risking free expression and contradicting children's rights. Current laws suggest age evaluations without explicit requirement. Upcoming digital identity wallets planned for 2026 could be used for age verification, potentially expanding beyond intended limits, creating further privacy issues. EFF critiques this approach, urging to prioritize user rights.

https://www.eff.org/deeplinks/2025/04/digital-identities-and-future-age-verification-europe

Microsoft Getting Nervous About Europe’s Tech Independence

By / Blog / ,

Microsoft is reacting to growing European skepticism about US tech companies by reinforcing data privacy commitments and enhancing its cloud infrastructure in Europe. Amid concerns over US policies and potential data vulnerabilities, Microsoft plans to increase its European data center capacity by 40%, implement a governance model compliant with European laws, and legally commit to contesting any government orders that threaten its operations in Europe. This strategy aims to restore customer trust and ensure compliance with local regulations amidst geopolitical tensions.

https://www.theregister.com/2025/04/30/microsoft_getting_nervous_about_europes/

Managing Shadow IT Risks

By / Blog /

CISOs face rising risks from shadow IT due to unauthorized technology use; 40% of employees utilize unsanctioned tools, linked to many security breaches. Prohibition can hinder innovation, so a balanced approach is needed. Strategies include deploying discovery tools, creating adaptive governance, conducting risk assessments, educating employees, and offering amnesty for reporting shadow IT. These methods convert threats into insights, promoting secure and agile technology use aligned with business goals, ultimately fostering a security-aware culture.

https://gbhackers.com/managing-shadow-it-risks/

Beyond Safe Models: Why AI Governance Must Tackle Unsafe Ecosystems

By / Blog / ,

AI governance must shift focus from just ensuring model safety to addressing the risks of unsafe deployment ecosystems, which are influenced by institutional contexts, conflicting incentives, and inadequate oversight. While initiatives like the EU AI Act emphasize technical compliance, they often ignore the broader environment affecting AI use, leading to harmful outcomes like discrimination and misinformation. Effective governance requires assessing deployment contexts, aligning institutional incentives, ensuring accountability, and establishing adaptive oversight to manage emerging risks, ultimately recognizing that AI's dangers stem from both its operation and the settings it inhabits.

https://www.techpolicy.press/beyond-safe-models-why-ai-governance-must-tackle-unsafe-ecosystems/

A Guide on Becoming a Chief Information Security Officer

By / Blog / ,

Become a CISO to lead cybersecurity, manage risks, and protect data. Responsibilities include strategic oversight, team management, incident response, and aligning security with business goals. Key skills: cybersecurity expertise, risk management, communication, leadership, and project management. Start with a tech-related degree, gain experience, earn certifications (like CISSP, CISM), and transition to leadership roles. Continuous learning and networking are essential for success in this evolving field. Average salary: ~$309,000 annually.

https://www.techloy.com/a-guide-on-becoming-a-chief-information-security-officer/

R&G Tech Studio: Navigating AI Literacy—Understanding the EU AI Act

By / Blog / ,

R&G Tech Studio podcast discusses the EU AI Act, focusing on AI literacy requirements for organizations. Hosts Rohan Massey and Edward Machin explain the broad definition of AI systems under the Act and emphasize the importance of AI literacy for both providers and deployers, irrespective of risk categories. Organizations must tailor AI literacy training based on contextual needs, employee roles, and resources. They suggest that companies begin developing AI literacy strategies now, despite limited guidance, to ensure compliance and effectively manage AI-related risks.

https://www.ropesgray.com/en/insights/podcasts/2025/04/rg-tech-studio-navigating-ai-literacy-understanding-the-eu-ai-act#page=1

Scroll to Top