Government Archives

CISA Guidelines for Secure Agentic AI Adoption

CISA Drew the Red Lines on Agentic AI — Most Are Already Across

by Uri Kedem May 28, 2026May 28, 2026 | Cybersecurity Risk Management

On April 30 and May 1, 2026, six national cybersecurity agencies jointly published Careful Adoption of Agentic AI Services, a 28-page guidance document on securing autonomous AI agents — the...

Runtime Policy Enforcement for Agentic AI Systems

AWS Rex Open-Sources the Runtime Layer of Agentic AI Security

by Danielle Barbour May 28, 2026May 28, 2026 | Cybersecurity Risk Management

On May 4, 2026, AWS published Introducing Trusted Remote Execution: Policy-Enforced Scripts for AI Agents and Humans, open-sourcing Rex under the Apache 2.0 license. The architecture is straightforward: scripts are...

Data-Layer Controls for Agentic AI Governance

Why Agentic AI Governance Is Falling Short — and What Actually Works

by Patrick Spencer May 28, 2026May 28, 2026 | Cybersecurity Risk Management

In July 2025, an AI coding agent on Replit’s “vibe coding” platform deleted a live production database during an active code freeze, wiping real records for more than 1,200 executives...

AI Agents: Governing the Emerging Traffic Category

When Bots Outnumber People: Governing the Third Traffic Category

by Patrick Spencer May 28, 2026May 28, 2026 | Cybersecurity Risk Management

The Thales 2026 Bad Bot Report, now in its 13th consecutive edition, introduces a third category of automated traffic alongside good bots and bad bots: AI agents. They browse websites,...

Shadow AI Training Gaps Drive Insider Risk

The 31% Problem: Shadow AI Training Gaps Are Now an Insider Risk

by Patrick Spencer May 27, 2026May 27, 2026 | Cybersecurity Risk Management

The 2026 DTEX/Ponemon Cost of Insider Risks Global Report ranked shadow AI as the leading driver of negligent insider incidents — ahead of unmonitored file sharing, personal webmail, and every...

The Unseen AI Governance Challenge of 2026

The AI You Can’t See: Why Visibility Has Become the Defining Governance Problem of 2026

by Patrick Spencer May 26, 2026May 27, 2026 | Cybersecurity Risk Management

A Reflectiz analysis of Pentera’s AI Security & Exposure Benchmark 2026 — a survey of 300 U.S. CISOs — confirmed what security leaders have suspected for the better part of...

Article 32 Security Measures for Defence Data

GDPR Article 32 Technical Measures: What UK Defence Contractors Must Implement

by Danielle Barbour May 24, 2026May 24, 2026 | GDPR Compliance

UK defence contractors face unprecedented scrutiny over their data protection practices as regulatory authorities intensify enforcement of GDPR Article 32’s technical and organisational measures. The defence sector’s handling of sensitive...

MoD Air-Gapped File Transfer Compliance Guide

UK Ministry of Defence Supplier Requirements: Implementing Air-Gapped File Transfer Solutions for Maximum Security

by Paul Sechser May 23, 2026May 23, 2026 | Secure File Transfer

The UK Ministry of Defence sets rigorous security standards for suppliers handling classified and sensitive defence information. Among the most critical requirements are air-gapped file transfer solutions that prevent unauthorised...

AI Agent Credentials: The Next Breach Risk

Agentic AI’s Identity Crisis: Why Machine Credentials Are Your Next Breach Vector

by Patrick Spencer May 20, 2026May 20, 2026 | Cybersecurity Risk Management

Key Takeaways AI Agents Get Over-Privileged Credentials. Enterprises grant machine identities broad access without applying human-level hygiene like rotation or least privilege. Forrester Predicts a Major Breach by End of...

Ontario AI Principles: Public Sector Compliance Essentials

Ontario AI Governance Principles: Public Sector Compliance Guide 2026

by Uri Kedem May 19, 2026May 19, 2026 | Cybersecurity Risk Management

Key Takeaways Joint Regulatory Framework. IPC and OHRC released unified principles that will directly guide assessments of public-sector AI systems. Operational Guidance Now. The principles fill the gap left by...

AI Attack Autonomy Doubles Every 4.7 Months

AI Attacker Doubling Rate Hits 4.7 Months: Govern Data Now

by Marc ten Eikelder May 19, 2026May 19, 2026 | Cybersecurity Risk Management

The U.K. government just published the most uncomfortable benchmark in cybersecurity. The AI Security Institute (AISI), a research arm of the Department for Science, Innovation and Technology, has been tracking...

CVE-2026-42897 Exposes Email Architecture Risks

Why CVE-2026-42897 Is the Email Architecture Wake-Up Call

by Bob Ertl May 19, 2026May 19, 2026 | Secure Email

On May 14, 2026, Microsoft disclosed CVE-2026-42897, an actively exploited critical cross-site scripting vulnerability in Microsoft Exchange Server. CVSS 8.1. Affects Exchange Server 2016, Exchange Server 2019, and Exchange Server...

EU Sovereignty Rules: May 27 Procurement Shift

May 27 EU Tech Sovereignty Reckoning: GCC High in Frankfurt Stopped Working

by Marc ten Eikelder May 13, 2026May 13, 2026 | Cybersecurity Risk Management

For nearly a decade, European data sovereignty has been argued in courts, conferences, and contract clauses. On May 27, 2026, it is expected to enter EU procurement law. Key Takeaways...

CVE-2026-32202: When a Folder Browse Becomes a Data Breach

by Bob Ertl May 13, 2026May 13, 2026 | Cybersecurity Risk Management

On April 27, 2026, Microsoft updated its advisory for CVE-2026-32202 to confirm what Akamai researchers had already documented: the vulnerability was being actively exploited in the wild. CISA followed the...

Beyond DSPM Discovery: Building Data Governance Control

DSPM Tells You Where the Data Is. Now What?

by Patrick Spencer May 13, 2026May 13, 2026 | Cybersecurity Risk Management

DSPM has moved from emerging category to mainstream security investment in eighteen months. Recent industry coverage indicates that approximately 30% of UK CISOs are purchasing DSPM solutions in 2026 to...

Get started.