ISMS.online Blog
Keeping you up-to-date on the world of information security and compliance.
AI is transforming the way many businesses work. Some 97% of executives claim they have deployed agents in the past year, with over half (57%) of their staff already using them, according to one st...
The European Commission published the Digital Omnibus Package in late 2025, with proposals designed to simplify and harmonise parts of the EU’s dig...
Not every data breach starts with a shadowy hacker and an external attack. Sometimes it’s not malicious third parties that overwhelm network defend...
Catch up with our favourite stories of the year
The International Organization for Standardization (ISO) released the updated ISO/IEC 27701 standard for privacy information management in October ...
Customers, boards and regulators are all in agreement. If cybersecurity breaches are impossible to prevent 100% of the time, the focus must be on i...
What can be done to regain control as the financial industry’s shadow AI issue gets worse? As tools such as OpenAI’s ChatGPT become ubiquitous, sha...
As breaches become part of everyday business, how has the conversation evolved and what do recent incidents reveal about good — and poor — incident...
All good things come to those who wait. At the time of writing, the Cyber Security and Resilience Bill (CSRB) was awaiting its committee stage in t...
The headlines from the 2026 edition of Cost of a Data Breach made for interesting reading, but does it actually demonstrate a better perspective of...
The White House isn’t losing any time preparing for the onslaught of zero-day vulnerabilities that frontier AI tools are expected to surface....
Multiple cyber-attacks against critical infrastructure highlight a need for resilience, operational risk and governance, rather than just technical...
Get a monthly round-up of all the information, privacy and cyber security news direct to your inbox.
The Copilot SearchLeak vulnerability chain shows how any AI assistant can evolve from a productivity feature into a new path into data that inherit...
Last month, attackers used a stolen credential to hack competitive intelligence SaaS provider Klue. But the seeds of the attack apparently started ...
As the risk of being hit grows, how well an organisation governs its data determines the blast radius of an attack and how quickly care can continu...
Not every data breach starts with a shadowy hacker and an external attack. Sometimes it’s not malicious third parties that overwhelm network defend...
The headlines from the 2026 edition of Cost of a Data Breach made for interesting reading, but does it actually demonstrate a better perspective of...
The White House isn’t losing any time preparing for the onslaught of zero-day vulnerabilities that frontier AI tools are expected to surface....
If you build critical business processes around a single AI service, what happens when that service disappears overnight? Earlier this year, organi...
With one supplier weakness able to trigger widespread operational disruption, how can firms boost resilience and manage risk? In January, US teleco...
On 15 April 2026, the National Institute of Standards and Technology (NIST) formally abandoned its longstanding mission to enrich all information a...
The European Union’s Cyber Resilience Act (CRA) is the first major regulation to treat cybersecurity as a product safety requirement rather t...
May was not a good month for Latvian national Deniss Zolotarjovs. The US Department of Justice secured a 102-month sentence against him for his rol...
Organisations have long understood the challenge of translating cyber into business risk. The CISO-boardroom communication breakdown is real and we...
Company number: 04922343
Nile House, Nile Street, Brighton, England, BN1 1HW
