IT Risk Management and Security

Two thousand years ago, anyone who wanted to know whether a battle, a journey, or a political endeavor would turn out well had an astonishing array of consulting services to choose from. One…

In the early 2000s, Nokia could probably have produced an impressive analysis of the past. Sales trends, market share, production quality, supply chains, brand strength—plenty of data and likely…

Decades before Fukushima, the nuclear industry had taken a fundamental methodological step: moving away from exclusively deterministic safety assessments and toward a systematic probabilistic…

300 suppliers, six risk characteristics, and a single question: Which suppliers are truly similar? Cluster analysis attempts to reveal hidden structures in multidimensional data—without…

After the 1986 Challenger disaster, physicist Richard Feynman encountered a remarkable range of estimates while working for the investigation commission. Estimates for a catastrophic failure of…

"Our system detects 99 percent of all attacks", announces the head of IT security. The CFO nods with relief: "So does that mean an alarm is a real attack 99 percent of the time?" Unfortunately,…

Imagine the production manager reporting to the board: "On average, our IT outages last only four hours." A collective sigh of relief. Four hours—you can survive that. Unfortunately, this average…

Cybersecurity can be so reassuring. After all, we’ve inventoried everything: servers, clients, applications, databases, interfaces, cloud services. Every asset has an owner, a criticality level,…

First OpenAI, then Anthropic and Meta – and now Google has acknowledged a striking incident involving one of its most powerful AI systems. During a cybersecurity test, Gemini moved beyond the…

Frontier AI changes the cyber threat landscape not because it suddenly invents an entirely new catalogue of attack techniques, but because it changes the speed, scale and autonomy with which…

The paradox has long been visible: cybersecurity is on board agendas, budgets are rising, and regulation is making senior management personally accountable. Yet security leaders regularly report…

The most powerful AI models can no longer merely explain program code or flag individual security vulnerabilities. They are increasingly capable of developing exploits, linking multiple attack…

Cyber risk has moved from the margins of operational risk management to the centre of economic and financial stability debates. In a deeply digitalised economy, cyber incidents no longer affect…

A new study on data poisoning in large language models suggests that even a small absolute number of manipulated documents can be enough to embed covert malfeasance in models. For companies that…

Agentic AI shifts the risk profile of AI systems: "Text can be wrong" becomes "Text can trigger actions." Once agents use tools and publicly use each other as a source of context, new attack…

In early 2024, British engineering giant Arup, known globally for its involvement in the renovation of the Sydney Opera House, fell victim to a meticulously orchestrated deepfake attack. A…

The study "Frontier AI systems have surpassed the self-replicating red line" published a few weeks ago reveals alarming developments in the field of artificial intelligence (AI). The authors of…

The Arctic Wolf Security Report 2024 provides a comprehensive overview of the current state of cybersecurity, emphasizing the persistent threat of ransomware, the rise of business email…