Intelligence desk

Security Leadership

A permanent file of Security.io’s selected briefings tagged to this executive theme. It reflects the publication’s curated coverage, not a census of all global activity.

2026-09-10EU product-security reporting clocks start tomorrowRegulatory

2026-09-08OpenAI wiki incident exposes the weakness of nominal read-only agent controlsAI Security

2026-09-07Boston Scientific recovery now requires customer-level proofResilience

2026-09-07OpenAI wiki acknowledgement raises the agent incident barAI Security

2026-09-03UK bill puts vendor removal and procurement restrictions on the tableRegulatory

2026-08-27Boston Scientific disruption turns cyber recovery into a healthcare supply decisionResilience

2026-08-25CISA logging architecture makes evidence quality a leadership decisionSecurity Leadership

2026-08-25ReliaQuest response shows device trust containing a stolen sessionIdentity

2026-08-25TikTok settlement turns children’s-data controls into a board assurance testRegulatory

2026-08-17Dutch cyber and critical-entity laws enter into forceRegulatory

2026-08-14Apple spyware alerts require a high-risk-user incident pathIncident Response

2026-08-14US sets framework for supervised private-sector cyber operationsRegulatory

2026-08-13NIST asks how the NVD should operate in the age of AIVulnerability Management

2026-08-13White House creates a federally controlled private cyber operations programmeRegulatory

2026-08-12AI vulnerability artefacts need semantic verification, not a successful runAI Security

2026-08-11GPT-5.6-Cyber turns provider access into an enterprise control-plane decisionAI Security

2026-08-10Self-evolving agent skills create a trajectory-poisoning control gapAI Security

2026-08-07OpenAI’s Black Hat timeline moves the first containment failure to 26 May 2026AI Security

2026-08-06NIST resets ransomware assurance around CSF 2.0Resilience

2026-08-06Poisoned replay data can silently break adaptive intrusion detectionAI Security

2026-08-03EU AI Act transparency enforcement begins, shifting AI inventory from programme work to evidence obligationRegulatory

2026-07-23US post-quantum programme moves from policy to named ownershipPolicy, Architecture and Cryptography

2026-07-17Ransomware refusal is a capability, not a statementBoard agenda

2026-07-17The Friday edition should define the weekend watchlistCISO desk

2026-07-15AI-assisted discovery is exposing a capacity mismatchSecurity engineering

2026-07-15Identity investment signals where buyers expect control pressureMarket desk

2026-07-15Patchapalooza changes the economics of vulnerability managementVulnerability desk

2026-07-13Monday needs a control-room brief, not a weekend inboxCISO desk

2026-07-13The weekend KEV watch belongs in Monday operationsVulnerability desk