Risk management
Risk management service
The Norwegian Data Protection Authority and the Norwegian Directorate of Health present a practical framework for privacy-friendly AI chatbots in the public sector. AI chatbots can provide citizens with faster access to reliable health information, provided that privacy by design is central. The report concludes that user queries generally cannot be considered anonymous, meaning the […]
Hugging Face disclosed a groundbreaking cyberattack in which an autonomous AI agent independently executed the entire intrusion—from initial compromise to privilege escalation and lateral movement. The attacker exploited vulnerabilities in the dataset-processing pipeline, performing more than 17,000 automated actions over a single weekend without direct human control. Although public models, datasets, and the software supply […]
AI has evolved from a technology initiative into a board-level strategic and enterprise risk that demands continuous oversight, not periodic reviews. Boards must establish clear governance, accountability, and AI risk appetite while ensuring innovation is balanced with responsible use. Traditional cybersecurity alone is no longer sufficient, organizations must protect AI-driven decision-making, data, identities, and autonomous […]
On July 7, the Senate will vote on the Cybersecurity Act (Cbw) and the Critical Entities Resilience Act (Wwke); if approved, both laws are expected to come into effect on August 15, 2026. The Cybersecurity Act (NIS2) expands legal obligations from approximately 1,000 to 8,000 organisations, with requirements for risk management, supply chain security, rapid […]
A victim of bank helpdesk fraud will receive over €95,000 back from Knab after Kifid ruled that the bank could not sufficiently prove that the fraudulent transactions were correctly authenticated. The scammer managed to gain access via a fake bank employee trick and remote support software, after which five payments were made to third parties. […]
Current AI prices are artificially low because players like OpenAI and Anthropic are investing billions to gain market share. OpenAI is even considering significant price cuts to slow the rapid rise of Anthropic, particularly in the enterprise market where Claude is becoming increasingly popular. This price war seems beneficial for users, but both companies are […]
The Canadian government aims to introduce a minimum age of 16 for social media through the new Safe Social Media Act. Platforms can only be exempted from this rule if they take demonstrably effective measures to protect children online. In addition, an independent Digital Safety Commission will be established to set safety standards, monitor compliance, […]
The initial results from the RDI self-assessment tool show that 58% of the organisations surveyed fall under the upcoming Cybersecurity Act (Cbw/NIS2). Within this group, 22% are classified as essential and 28% as important, which determines the level of supervision. The law entails three core obligations for both categories:🔹 Duty of care – implementing appropriate […]
The MIT AI Risk Initiative has published a comprehensive Delphi study in which 272 experts assessed 24 AI risk categories based on probability, impact, and societal consequences. The main conclusion: prioritizing risks is becoming crucial, as not all AI risks can be effectively addressed simultaneously. Notably, all 24 risk categories maintain at least a 5% […]
The European Parliament has passed a draft law known as the A.I. Act, which aims to regulate artificial intelligence (AI) and its riskiest uses.The draft law would impose new restrictions on facial recognition software and require AI system developers to disclose more about the data used in their programs. The European Union has been debating […]