ISMS.online Blog
Keeping you up-to-date on the world of information security and compliance.
The Copilot SearchLeak vulnerability chain shows how any AI assistant can evolve from a productivity feature into a new path into data that inherits the user’s reach. What lessons can securit...
Last month, attackers used a stolen credential to hack competitive intelligence SaaS provider Klue. But the seeds of the attack apparently started ...
As the risk of being hit grows, how well an organisation governs its data determines the blast radius of an attack and how quickly care can continu...
Catch up with the stories that have caught our eye this month
What does the 700Credit breach show about the financial data system and supply chain risks, and what lessons can be learned? By Kate O’Flaherty In ...
Organizations fret about security and privacy risk. And more recently, they’ve paid attention to AI risk. But how often do they think of all ...
The GDPR was always meant to be vague. By not listing prescriptive technical controls – as, for example, PCI DSS does – the regulation does a bette...
If you build critical business processes around a single AI service, what happens when that service disappears overnight? Earlier this year, organi...
With one supplier weakness able to trigger widespread operational disruption, how can firms boost resilience and manage risk? In January, US teleco...
On 15 April 2026, the National Institute of Standards and Technology (NIST) formally abandoned its longstanding mission to enrich all information a...
The European Union’s Cyber Resilience Act (CRA) is the first major regulation to treat cybersecurity as a product safety requirement rather t...
May was not a good month for Latvian national Deniss Zolotarjovs. The US Department of Justice secured a 102-month sentence against him for his rol...
Get a monthly round-up of all the information, privacy and cyber security news direct to your inbox.
Organisations have long understood the challenge of translating cyber into business risk. The CISO-boardroom communication breakdown is real and we...
Nation states are ramping up destructive attacks utilising ransomware and wipers. What can be done to manage the risk? In 2017, Russia-linked adver...
Insider risk was until recently largely considered to be limited to isolated incidents. Dangerous, yes. But usually, the result of negligent employ...
Last month, attackers used a stolen credential to hack competitive intelligence SaaS provider Klue. But the seeds of the attack apparently started ...
As the risk of being hit grows, how well an organisation governs its data determines the blast radius of an attack and how quickly care can continu...
If you build critical business processes around a single AI service, what happens when that service disappears overnight? Earlier this year, organi...
The EU AI Act is already in force, penalties are already active, and most enterprises cannot classify their own AI systems. The governance gap is n...
Cyber resilience has emerged as one of the key areas of focus for the cyber-industry of the past few years. Even the government has cited it in a c...
ISMS.online (IO) has been named a Leader in the G2 Grid® Reports for Summer 2026. We achieved eleven badges in the Summer Report! G2, a leading pee...
Old social engineering attackers never die; they just evolve and get better. Here’s a story of an attack group audacious enough to keep compr...
What can be done to regain control as the financial industry’s shadow AI issue gets worse? As tools such as OpenAI’s ChatGPT become ubiquitous, sha...
The state opening of parliament is an occasion filled with the kind of pomp and ceremony Britain still does better than any other country. What it’...
Company number: 04922343
Nile House, Nile Street, Brighton, England, BN1 1HW
