Blog

I loved being a guest on today’s Cyber Risk Alliance webinar with Adrian and wanted to share some of my additional notes and thoughts in case you missed the live show (or prefer reading my weekly newsletter). The Mythos and Daybreak hype cycle’s missing the whole point. Niels Provos proved it with his IronCurtain framework: swap…

Key quote: The bill establishes consumer notice requirements, mandating that deployers provide clear and conspicuous notice to consumers at the point of interaction with a covered ADMT. A deployer is required to provide a consumer with a plain language description of a covered ADMT’s role within 30 days after the covered ADMT makes a consequential…

Key quote: Today’s agreement on the AI act significantly supports our companies by reducing recurring administrative costs. It ensures legal certainty and a smoother and more harmonised implementation of the rules across the Union, strengthening EU’s digital sovereignty and overall competitiveness. At the same time, we are stepping up the protection of children targeting risks…

Key quote: “Update – Canvas is now available for most users. Canvas Beta and Canvas Test remain in maintenance.” Why it matters: The May 2026 disruption of Canvas isn’t unique. It’s the predictable result of the underlying economics of an education sector that’s prioritized convenience over risk management. By consolidating the operations of thousands of institutions…

Key quote: All of Marquis Software Solutions, Inc.’s deadlines in the above-captioned action are stayed pending the parties’ mediation efforts. Why it matters: The litigation surrounding the Marquis Software Solutions breach is currently taking a break for mediation, as seen in the April 6, 2026, Order in In Re Marquis Software Solutions, Inc. Data Breach Litigation (Case…

Key quote: “Because no Defendant in this matter has served on Plaintiff either an answer or a motion for summary judgment as of the filing of this Notice, Plaintiff may dismiss this matter without prejudice as a matter of right.” Why it matters: I was tracking Case 3:26-cv-02803 because it potentially exposed an uncomfortable economic…

Strikingly, in Panel C we see employees are far more optimistic than executives on the impact of AI on future employment… In particular, employees predict that AI will increase employment by approximately 0.5% in their firms over the next three years compared to the prediction from executives that it will reduce employment by 0.7% in…

Key quote: “As cybersecurity threats continue to grow, the Department is committed to holding institutions accountable.” Why it matters: The MOVEit zero-day was exploited starting in May 27, 2023. Progress Software shipped a patch on May 31. CISA added CVE-2023-34362 to its Known Exploited Vulnerabilities catalog that June. But here we are in April 2026,…