Intelligence desk

Security Leadership

A permanent file of Security.io’s selected briefings tagged to this executive theme. It reflects the publication’s curated coverage, not a census of all global activity.

2026-11-04Binance breach turns AI tooling and deployment tokens into a USD 6.34bn control-plane failureIdentity and Control Plane

2026-11-03NCSC says AI will amplify long-tolerated technical debtAI Security

2026-10-30UNM restores care, but recovery evidence remains incompleteResilience

2026-10-28eMudhra root removal requires certificate-chain and exception controlIdentity

2026-10-28UNM incident makes clinical continuity evidence a board-level controlResilience

2026-10-21PHP critical-release warning demands an emergency application change windowApplication Security

2026-10-19OpenAI report shows an agent substituting judgement for account permissionAI Security

2026-10-13Ahold Delhaize isolates systems as multinational incident tests retail continuityIncident Response

2026-10-12North Platte cyber incident tests communications continuityResilience

2026-10-08DSG Retail case closes with security duty intactRegulatory

2026-10-08MonsterCloud charge exposes ransomware-retainer assurance gapThird-Party Risk

2026-10-06Princeton exfiltration finding shows why preliminary clean reviews cannot close an incidentIncident Response

2026-10-05CIRCIA final rule enters White House reviewRegulatory

2026-10-02California subpoenas OpenAI over AI model security incidentsAI Security

2026-10-01FTC frontier-AI inquiry raises the standard for enterprise agent assuranceRegulatory

2026-09-30OpenAI disclosure makes agent boundaries and notification clocks a board issueAI Security

2026-09-29DC health-data exposure puts publication controls under reviewData Protection

2026-09-29Facebook privacy verdict raises the price of unsupported assuranceRegulatory

2026-09-28Kiteworks lifts weekend shutdown, but restart is not closureResilience

2026-09-23TrustSink shows why external MFA providers need control-plane monitoringIdentity

2026-09-22Gemini incident makes AI evaluation containment a CISO controlAI Security

2026-09-22Google location-data ruling turns privacy evidence into a board deadlineRegulatory

2026-09-18CISA gives cyber decoys a formal place in detection strategyIncident Response

2026-09-16NIST finalises token-protection controls for agencies and cloud providersIdentity

2026-09-14The CRA reporting clock is running — and the weekend exposed an operational caveatRegulatory

2026-09-11EU product-security reporting clock starts todayRegulatory

2026-09-10EU product-security reporting clocks start tomorrowRegulatory

2026-09-08OpenAI wiki incident exposes the weakness of nominal read-only agent controlsAI Security

2026-09-07Boston Scientific recovery now requires customer-level proofResilience

2026-09-07OpenAI wiki acknowledgement raises the agent incident barAI Security

2026-09-03UK bill puts vendor removal and procurement restrictions on the tableRegulatory

2026-08-27Boston Scientific disruption turns cyber recovery into a healthcare supply decisionResilience

2026-08-25CISA logging architecture makes evidence quality a leadership decisionSecurity Leadership

2026-08-25ReliaQuest response shows device trust containing a stolen sessionIdentity

2026-08-25TikTok settlement turns children’s-data controls into a board assurance testRegulatory

2026-08-17Dutch cyber and critical-entity laws enter into forceRegulatory

2026-08-14Apple spyware alerts require a high-risk-user incident pathIncident Response

2026-08-14US sets framework for supervised private-sector cyber operationsRegulatory

2026-08-13NIST asks how the NVD should operate in the age of AIVulnerability Management

2026-08-13White House creates a federally controlled private cyber operations programmeRegulatory

2026-08-12AI vulnerability artefacts need semantic verification, not a successful runAI Security

2026-08-11GPT-5.6-Cyber turns provider access into an enterprise control-plane decisionAI Security

2026-08-10Self-evolving agent skills create a trajectory-poisoning control gapAI Security

2026-08-07OpenAI’s Black Hat timeline moves the first containment failure to 26 May 2026AI Security

2026-08-06NIST resets ransomware assurance around CSF 2.0Resilience

2026-08-06Poisoned replay data can silently break adaptive intrusion detectionAI Security

2026-08-03EU AI Act transparency enforcement begins, shifting AI inventory from programme work to evidence obligationRegulatory

2026-07-23US post-quantum programme moves from policy to named ownershipPolicy, Architecture and Cryptography

2026-07-17Ransomware refusal is a capability, not a statementBoard agenda

2026-07-17The Friday edition should define the weekend watchlistCISO desk

2026-07-15AI-assisted discovery is exposing a capacity mismatchSecurity engineering

2026-07-15Identity investment signals where buyers expect control pressureMarket desk

2026-07-15Patchapalooza changes the economics of vulnerability managementVulnerability desk

2026-07-13Monday needs a control-room brief, not a weekend inboxCISO desk

2026-07-13The weekend KEV watch belongs in Monday operationsVulnerability desk