DIDAS warns that age verification alone cannot solve harmful content, addictive design, profiling or commercial exploitation of children online. Where verification is necessary, it should reveal only what is required, such as a simple “over/under age threshold”, without exposing identity, birth date or biometrics. DIDAS proposes six principles: privacy by design/default, unlinkability, data minimisation, open-source […]
97% of S&P 500 companies mention AI in their annual filings, but only around 1 in 5 document a process for managing AI-related cyber risk. Even more striking: fewer than 4% describe a genuinely governed process with clear accountability and controls. Guardrail Technologies found a 77-percentage-point gap between talking about AI and demonstrating how its […]
The Financial Stability Board (FSB) currently identifies the impact of advanced AI on cyber risk as the most urgent threat to global financial stability. Frontier AI can drastically change the speed, scale, and cost of cyberattacks, allowing vulnerabilities to be discovered and exploited more rapidly. At the same time, the dependence on only a few […]
Many cyberattacks are not sophisticated, but instead exploit known and often easily preventable security issues. CISA primarily observes the exploitation of vulnerabilities such as SQL Injection, command injection, missing authentication, and poor input validation. Publicly accessible services such as RDP, SMB, and Telnet also frequently provide an easy entry point for attackers. Organizations must patch […]
Cyberattackers have stolen personal data belonging to 8.7 million customers of three major UK airports. The breach affects Manchester, Stansted and East Midlands airports, exposing emails, phone numbers, vehicle registrations and postcodes. The compromised information came from services including parking, lounges, Fast Track bookings and airport Wi-Fi. Manchester Airport Group temporarily disabled its “Manage My […]
Employees are increasingly using unauthorized AI tools, causing Shadow AI to become a serious security and privacy risk. Sensitive corporate and personal data can inadvertently end up in public AI models, beyond the oversight of IT and security. Simply banning AI rarely works: organizations must understand which AI tools employees are using and for what […]
The central government is increasingly using the public cloud, but governance, risk management, and strategic direction are not keeping pace. Of the 126 material public cloud services, no prior risk assessment was conducted for as many as 67% regarding sovereignty, continuity, and data protection, among other factors. Furthermore, the dependence on primarily American hyperscalers creates […]
AI drastically shortens the time between the discovery of a vulnerability and actual exploitation: from an average of 771 days in 2018 to potentially just 4 hours by 2026. Traditional patch cycles can no longer keep up with this pace; organizations must therefore transition from periodic security to continuous risk management. An up-to-date inventory of […]
Phocuswright sees that the EU Digital Identity Wallet is gaining ground, but adoption differs strongly between France, Germany, and the UK. Awareness is growing, France leads with 25%, while Germany shows the largest increase from 13% to 21%. Trust is decisive: 54% of Germans trust the Personalausweis, while trust in digital identity systems is clearly […]
State Secretary Aerdts believes the online world is currently insufficiently safe for children and is therefore calling for a European minimum age for social media. According to her, social media platforms must take more responsibility for protecting minors against harmful content and addictive algorithms. Simultaneously, the government is launching a campaign to encourage parents to […]