Featured

The reported PocketOS incident, in which an AI agent deleted a live production database and its backups in a matter of seconds, has quickly become a defining moment in the conversation around autonomous systems in enterprise environments. An AI-powered coding or operations agent, operating with legitimate access via API tokens, encountered what it interpreted as a configuration or credential issue. It then took it upon itself to resolve the problem, issuing a destructive command that...

By James Odom, Director of Cyber, and Jim Small, Director of Identity at Hippo Digital   For years, identity and cyber security have been treated as separate disciplines, with identity focusing on authentication, onboarding and access and cyber security focusing on networks, monitoring and threat response. That separation made sense when systems had clearer boundaries. As of 2026, that boundary has all but disappeared. Services are becoming cloud-based. Workforces distributed. Third parties connect directly to...

By Alan Stewart-Brown, VP EMEA, Opengear   Disruption in financial services rarely follows a clean script. A misconfiguration, a spike in malicious traffic, or a poorly timed change can cascade across platforms and teams, particularly where systems and suppliers are tightly coupled. When that chain reaction starts, the challenge is rarely identifying the fault. It is retaining enough control to limit the damage and restore services before the situation compounds. That is precisely the environment...

I want to talk about a bug. Not because the bug itself was exceptional, but because what it exposed should change how every organisation architects AI governance. For several weeks earlier this year, Microsoft 365 Copilot read and summarised confidential emails despite sensitivity labels and Data Loss Prevention policies being correctly configured to block that behaviour. The bug, tracked as CW1226324, affected emails in users’ Sent Items and Drafts folders. Sensitive legal communications, business contracts...

Sarah Armstrong-Smith brings rare front-line authority to the cyber resilience conversation, with a career shaped by some of the most defining digital threats of the modern era. From the Millennium Bug through to board-level cyber strategy at Microsoft and the London Stock Exchange Group, her perspective is grounded in real crisis leadership, not theory. That depth is exactly why she is such a sought-after cybersecurity speaker. As former Chief Security Advisor for Microsoft EMEA, a...

This week, UK government leaders and cyber officials are sounding an increasingly urgent alarm over the security risks posed by artificial intelligence, warning that the technology is both amplifying existing cyber threats and reshaping the balance between attackers and defenders. In a joint open letter to business leaders, ministers and the National Cyber Security Centre (NCSC) heed caution on a "new generation of AI models are becoming capable of doing work that previously required rare...

For years, organisations have treated cyber security as something that happens within their own walls. Protect the network, secure the endpoints, monitor the environment. Job done. Security was architected like a moat and castle, but today the model is no longer effective. Today, the real exposure sits outside the organisation. It sits in third parties, fourth parties, and the vast network of suppliers across the world that modern businesses depend on. As organisations scale and...

New research from digital privacy firm Proton has revealed the staggering scale of how Google, Apple, and Meta share user data with US government authorities, and the numbers are only growing. According to the findings, the three tech giants have collectively handed over data from more than 3.5 million user accounts over the past decade, representing a rise of more than 770% since tech companies first began publishing transparency reports on government requests. The data...

Organised by Eskenzi PR in media partnership with the IT Security Guru, the Most Inspiring Women in Cyber Awards aim to shed light on the remarkable women in our industry. The following is a feature on one of 2026’s Top 20 women selected by an esteemed panel of judges. Presented in a Q&A format, the nominee’s answers are written in their own words. In 2026, the awards were sponsored by BT, Bridewell, Plexal and Fidelity International. Community partners...

Organised by Eskenzi PR in media partnership with the IT Security Guru, the Most Inspiring Women in Cyber Awards aim to shed light on the remarkable women in our industry. The following is a feature on one of 2026’s Top 20 women selected by an esteemed panel of judges. Presented in a Q&A format, the nominee’s answers are written in their own words. In 2026, the awards were sponsored by BT, Bridewell, Plexal and Fidelity International. Community partners...