The initial results from the RDI self-assessment tool show that 58% of the organisations surveyed fall under the upcoming Cybersecurity Act (Cbw/NIS2). Within this group, 22% are classified as essential and 28% as important, which determines the level of supervision. The law entails three core obligations for both categories:🔹 Duty of care – implementing appropriate […]
Employees are increasingly using AI tools such as ChatGPT, Gemini, and Claude without clear guidelines from their organization. This creates the risk of personal data, trade secrets, and confidential documents unintentionally ending up in external AI systems. The municipality of Eindhoven reported a data breach after employees uploaded more than 1,000 documents containing sensitive personal […]
Agentic AI is developing faster than organizations can manage; the primary risks have now been proven in real incidents and CVEs. Prompt injection remains the most significant attack vector and forms the basis for many attacks on AI agents. The line between AI Safety and AI Security is blurring: the same design choices cause both […]
Many organizations are experimenting extensively with AI, but see little structural value yet. According to McKinsey, the problem lies not with the technology, but with the way organizations are structured. The greatest gain is not in automating tasks, but in accelerating and improving decision-making. AI removes cognitive bottlenecks and enables faster, smarter choices. Therefore, AI […]
Global data center capacity has grown explosively over the past 15 years, driven by AI, cloud computing, and hyperscalers such as Amazon, Microsoft, Google, and Meta. The number of data centers rose by over 140%, while total computing power increased by approximately 900%. The United States dominates the market with around 25% of all data […]
The European Commission wants member states to henceforth conduct a sovereignty risk assessment for every critical digital service, focusing on foreign influence, data access, and continuity risks. Within one year, governments must determine the required level of protection for each public sector and adjust their procurement policies accordingly. Only approximately 1% of public services are […]
Researcher Kevin Zwaan (Q-Cyber) demonstrates that ChatGPT and other LLMs can bypass their security boundaries through a subtle form of psychological manipulation. Instead of technical exploits, the attack targets the model’s “affective architecture”: the tendency to align with the user. Through a prolonged conversation about freedom, limitations, and self-reflection, the AI gradually shifts its loyalty […]
The cyberattack on the municipality of Epe did not begin with a software vulnerability, but with a clever ClickFix social engineering attack in which an employee manually activated malware. The attacker subsequently managed to crack an administrator’s password, gaining access to a Kerberos admin ticket. Following this, an emergency account without MFA was also compromised—an […]
AI agents are rapidly moving from experiments to core business systems, but governance is struggling to keep pace. 65% of organizations experienced at least one AI agent-related security incident in the past year, making incidents a mainstream operational reality. The biggest impact was exposure or mishandling of sensitive data (61%), followed by operational disruption (43%) […]
According to security researcher Mick Beer, Ray-Ban Meta glasses are much more than just smart sunglasses: they continuously collect images, audio, and context from the wearer’s surroundings. In his view, the primary privacy concern lies not with the user, but with bystanders who are unknowingly filmed or recorded without consent. Captured data can end up […]