Companies raise cybersecurity budgets but shadow AI risks persist
A new report says shadow AI remains a persistent problem despite increased IT and security budgets. Senior leaders in regulated sectors face ongoing risk exposure from unauthorised AI use. Stronger oversight and controls are needed to address these gaps.
Attackers use Microsoft Entra ID credentials to breach MSP client systems
Attackers are using valid Microsoft Entra ID credentials to access organisations in multiple sectors, according to Cybersecurity Dive. This poses a risk to banks, insurers and healthcare providers that rely on managed service providers. Firms should review credential management and supplier access.
Hackers steal funds from Crédit Mutuel Arkéa in cyberattack, bank suspends transactions
Crédit Mutuel Arkéa confirmed hackers stole money after breaching its systems. The French bank has suspended some transactions and is working with authorities. Cyber risks are rising for banks and require stronger controls and rapid response.
Ballistic Ventures seeks $490M for AI-driven cybersecurity funds
Ballistic Ventures is seeking to raise $490 million across two new funds, according to regulatory filings. The move comes as AI-driven threats drive investor interest in cybersecurity. Senior leaders should track how AI is reshaping risk and investment priorities.
CPS prosecutor cites imaginary case from AI in high court, raising legal risks
A senior CPS prosecutor cited a fictional legal precedent in a high court case, sourced from an AI-generated internet search. This error raises concerns about AI reliability in legal proceedings and the risk of false information shaping decisions. Legal and compliance leaders must review AI use policies and staff training.
US tech stocks rebound as investors weigh AI regulation risk post-midterms
US tech stocks rose after a brief selloff, with the Nasdaq up 0.83% as investors assessed the impact of US midterm elections. Potential Democrat gains could mean more AI regulation, affecting digital and compliance leaders. Watch for regulatory signals as results settle.
Shopify merchants hit by suspected AI-powered cyberattacks via third-party apps
A German software engineer found a fake checkout redirect on a Shopify store, traced to a third-party app. This raises concerns for regulated-industry digital leaders about risks from external ecommerce integrations. Firms should review third-party app security.
Anthropic develops FlashProve to verify AI model outputs cryptographically
Anthropic has launched FlashProve, an open source system for cryptographically verifying which AI model produced a given output. This matters for digital and risk leaders as it addresses provenance and trust in AI, key for compliance. The system is not yet in commercial use.
Geoffrey Hinton warns AI could trigger financial or power blackouts within a year
AI pioneer Geoffrey Hinton says a major incident such as a financial or power system blackout could happen this year or next. Senior leaders in banking, insurance and utilities face direct operational and systemic risks. Watch for regulatory moves on mandatory AI testing.
DoorDash’s $17bn Instacart deal puts pressure on retail media ad pricing and measurement
DoorDash plans to acquire Instacart for around $17 billion, with completion expected by 2028. The deal could reshape retail media for advertisers, affecting costs, data access and measurement. Brand leaders should watch for regulatory review and evolving ad strategies.
Salesforce to buy Cresta for $2.7bn to expand voice-powered support
Salesforce plans to acquire Cresta, an AI-powered contact-centre software firm, for a reported $2.7bn. The move extends Salesforce’s reach into voice-based customer support, a growing area for digital service providers. Leaders should watch for integration details and client impact.
Infrastructure groups urge 10-year extension of cybersecurity data-sharing law
Industry associations have asked Congress to renew a key cybersecurity information-sharing law for another decade. The move comes amid growing AI threats, raising the stakes for banks, insurers and healthcare groups. Renewal could shape future compliance and risk strategies.
Most Americans reject AI-only decisions in healthcare and insurance
A Pew Research Center report says 60% of US adults are uneasy with AI in medical diagnosis or treatment decisions. Only 5% are open to AI-only insurance claim decisions. Insurers and healthcare leaders face ongoing public distrust and must address transparency and consent.
UK AI minister warns of imminent cyber breach risk for public and private sectors
UK AI minister Kanishka Narayan said a serious cyber breach is “extremely likely” in both public and private sectors, with neither ready. This raises urgent risk concerns for regulated firms. Leaders should review cyber resilience and AI risk controls now.
FDA and CMS seek state partnerships on AI regulation and liability in healthcare
Federal officials plan to work with states on regulating AI and protecting doctors from AI liability, according to STAT. This move could reshape how AI tools are governed and used in healthcare. Senior leaders should watch for new compliance and risk frameworks.
CrowdStrike spends nearly $500m on Fiddler AI and Dreadnode to expand AI security
CrowdStrike is buying Fiddler AI and Dreadnode for about $495 million to strengthen its AI security products. This move signals rising demand for monitoring and testing AI models in regulated sectors. Firms should assess if current controls cover new AI-driven risks.
Supermarkets in seven countries face cyber-attacks on refrigeration systems
Supermarket chains in seven European countries reported cyber-attacks that raised fridge and freezer temperatures to 50C, echoing a recent French incident. For banks, insurers and retailers, this shows a growing risk to critical supply chains and operational technology. Firms should review their cyber defences urgently.
NHS claims on Palantir AI platform disputed by 29 hospital trusts
The Guardian reports that 29 NHS trusts listed as benefiting from Palantir’s £330m AI data platform say they are not using it or its applications. This raises questions about AI adoption claims and the accuracy of NHS reporting for regulated healthcare leaders.
North Korean hackers use AI to drive $6.3 billion Binance crypto theft
North Korea’s elite TraderTraitor group used AI to steal $6.3 billion from Binance, according to the FBI. The group’s tactics now fund up to 40% of the regime’s weapons programmes. Crypto firms and financial institutions must reassess cyber risk and staff access controls.
White House AI task force omits CISA, raising security concerns
The White House’s new AI task force does not include the Cybersecurity and Infrastructure Security Agency. Experts say this could hinder efforts to address AI security for critical infrastructure. Senior leaders should assess how this may affect sector risk.