Risk & Regulation

Europe’s cybersecurity agency has published practical advice on software bills of materials, with particular attention to smaller suppliers and secure-by-design responsibilities.

The identity vendor is integrating a human authorisation service with agentgateway and Cerbos, aiming to prove that a real person approved a sensitive agent action.

Teradata has combined data anonymisation, access controls, post-quantum transport protection and immutable backups in a single enterprise AI security proposition.

IANS and Artico Search report that large companies are assigning AI security leadership while responsibility for enterprise governance and board scrutiny remains unsettled.

Ministers want serious AI incidents and near misses brought into a national reporting and response system, moving the governance debate from model testing towards operational accountability.

IBM and CUBE are linking regulatory change directly to AI systems, controls and owners - a sign that governance is shifting from policy documentation to operating infrastructure.

EU's AI-generated content labelling code takes effect alongside new AI Act transparency rules, with nearly 190 companies signed on by end of July.

EU AI Act's Article 50 transparency rules are now live, requiring AI disclosure, content marking, and deepfake labelling for anyone operating in the bloc.

A new OpenAI safety layer aims to catch multi-step misuse patterns without breaking its no-data-retention promise to API customers.

The road to hell is paved with good intentions, and most of them arrive as newsletters. On unsubscribe culture, marketing bullshit, and why your voice is more welcome here than your inbox space.

Google security team members Priya Pandey, Aron Eidelman, and Leonid Yankulin explain why probabilistic AI is breaking traditional DevSecOps, and how runtime security and safer observability must evolve to keep sensitive data out of your logs.

The Pentagon’s blacklisting of Anthropic over AI weapons and surveillance restrictions exposes a new class of governance risks for enterprise AI — and reveals how differently America’s leading AI companies view their obligations to the state.

IonQ has agreed an all-stock acquisition of Zero Trust specialist Elisity worth up to $1.3 billion, extending its security proposition beyond cryptography into policy enforcement.

A UK committee hearing has concentrated attention on the powers, independence and timing of model testing, including whether authorities can compel disclosure or stop a release.

Regulators are asking banks to show how autonomous systems are bounded, observed and stopped, shifting the debate from AI principles to evidence that supervisors can test.

The Bank of England has linked the AI investment boom with frontier-model cyber and operational risk, placing financing, resilience and governance in one financial-stability frame.