ISMS.online Blog
Keeping you up-to-date on the world of information security and compliance.
The White House isn’t losing any time preparing for the onslaught of zero-day vulnerabilities that frontier AI tools are expected to surface. On June 2nd, President Trump signed Executive Ord...
Multiple cyber-attacks against critical infrastructure highlight a need for resilience, operational risk and governance, rather than just technical...
The Copilot SearchLeak vulnerability chain shows how any AI assistant can evolve from a productivity feature into a new path into data that inherit...
Catch up with the stories that have caught our eye this month
What does the 700Credit breach show about the financial data system and supply chain risks, and what lessons can be learned? By Kate O’Flaherty In ...
Organizations fret about security and privacy risk. And more recently, they’ve paid attention to AI risk. But how often do they think of all ...
The GDPR was always meant to be vague. By not listing prescriptive technical controls – as, for example, PCI DSS does – the regulation does a bette...
Last month, attackers used a stolen credential to hack competitive intelligence SaaS provider Klue. But the seeds of the attack apparently started ...
As the risk of being hit grows, how well an organisation governs its data determines the blast radius of an attack and how quickly care can continu...
If you build critical business processes around a single AI service, what happens when that service disappears overnight? Earlier this year, organi...
With one supplier weakness able to trigger widespread operational disruption, how can firms boost resilience and manage risk? In January, US teleco...
On 15 April 2026, the National Institute of Standards and Technology (NIST) formally abandoned its longstanding mission to enrich all information a...
Get a monthly round-up of all the information, privacy and cyber security news direct to your inbox.
The European Union’s Cyber Resilience Act (CRA) is the first major regulation to treat cybersecurity as a product safety requirement rather t...
May was not a good month for Latvian national Deniss Zolotarjovs. The US Department of Justice secured a 102-month sentence against him for his rol...
Organisations have long understood the challenge of translating cyber into business risk. The CISO-boardroom communication breakdown is real and we...
The White House isn’t losing any time preparing for the onslaught of zero-day vulnerabilities that frontier AI tools are expected to surface....
Last month, attackers used a stolen credential to hack competitive intelligence SaaS provider Klue. But the seeds of the attack apparently started ...
As the risk of being hit grows, how well an organisation governs its data determines the blast radius of an attack and how quickly care can continu...
Nation states are ramping up destructive attacks utilising ransomware and wipers. What can be done to manage the risk? In 2017, Russia-linked adver...
Insider risk was until recently largely considered to be limited to isolated incidents. Dangerous, yes. But usually, the result of negligent employ...
The EU AI Act is already in force, penalties are already active, and most enterprises cannot classify their own AI systems. The governance gap is n...
Cyber resilience has emerged as one of the key areas of focus for the cyber-industry of the past few years. Even the government has cited it in a c...
ISMS.online (IO) has been named a Leader in the G2 Grid® Reports for Summer 2026. We achieved eleven badges in the Summer Report! G2, a leading pee...
Old social engineering attackers never die; they just evolve and get better. Here’s a story of an attack group audacious enough to keep compr...
Company number: 04922343
Nile House, Nile Street, Brighton, England, BN1 1HW
