GRC stories
Tighter Indian audit rules are pushing banks and public bodies to watch database activity more closely, especially inside sensitive systems.
A new analysis of 9.2 million checks shows most firewalls still fail compliance tests, leaving hybrid networks exposed to hidden risk.
Manual evidence gathering could become less costly for regulated firms as JupiterOne's new tool checks whether controls still work in live systems.
Banks and investment firms face mounting exposure as ransomware incidents jump and more than half of vendors carry high-severity flaws.
Mid-sized firms facing faster exploits can now outsource patching, exposure scanning and threat monitoring under one contract.
Enterprises are turning to governed AI tools as Snowflake and Anthropic expand Claude access across Cortex AI for sensitive data workflows.
It may help regulated customers use archived data for AI without moving sensitive records into separate systems, reducing compliance risk.
Only 6% of security teams can see all AI deployments, leaving most organisations exposed as use of shadow tools surges.
Boards will get clearer visibility of cyber threats as the new software ties vulnerability data to strategic priorities and business impact.
Only 34% of organisations have a current view of their digital certificates, leaving most exposed to outages from expired credentials.
Rising vulnerability volumes are outpacing fix times, prompting HackerOne to roll out an AI system that feeds confirmed threats into developer tools.
Businesses adopting AI now face a single service aimed at filling gaps in governance, monitoring and incident response across workflows.
Only 12% of chief information security officers have recently validated controls they expect to stop intruders moving sideways through networks.
Companies can now tie AI code-use risks to developer training, with Secure Code Warrior aiming to prove compliance at commit level.
Regulated firms could gain tighter oversight and faster document workflows as Hyland adds agent controls, context tools and sector packages.
The move gives the cyber risk provider closer access to EMEA customers as demand rises for better oversight of supplier vulnerabilities.
The survey also found most firms still lack secrets scanning and rapid audit proof, leaving hidden credentials and compliance delays as weak spots.
Businesses can now centralise meeting notes and decisions in the UK, as Plaud's new team workspace aims to curb lost context and save time.
The update should cut manual access approvals and give organisations clearer reporting from their security systems, while improving accessibility.
Regulated employers can now test their AI controls in minutes, as the Brisbane firm targets stricter data rules and workplace leak risks.
