We cut through the noise so you can stay informed, ahead of threats, and ready to act.
Two critical weaknesses, known together as PHP2Shell, have been identified in PHP, technology widely used to support websites, online applications and commercial and open-source products. That means your business could be exposed even if you don’t knowingly use PHP.
AI is a technology, not a peril, so losses may fall under cyber, tech E&O, D&O, EPL, or media liability. Two misconceptions run in opposite directions: no affirmative AI wording does not always mean no cover, and affirmative wording does not guarantee comprehensive cover.
Three defensive tools: a five-factor AI deployment risk score (potential harm, data and rights, autonomy, evidence gap, vendor dependence), documented board risk-appetite decisions, and an AI incident-response checklist preserving system state and chain of custody. CISOs has to negotiate log access, model snapshots, liability caps, and dispute terms into vendor contracts, since evidence rights end once signed. Regulators and litigators will assess the evidence an organisation can produce, not its framework alignment.
We handpick 10 must-read stories from trusted sources.
Get the week's most important insights in minutes.
Strategic insights for professionals who make an impact.
Catch up on earlier weekly briefings and track how cybersecurity themes are evolving over time.
10 articles on TLS certificate trust, operational technology, PHP scanning, continuous authentication, AI governance and cyber insurance.
10 articles on ransomware controls, verified patching, AI agent security, connected infrastructure and integrated cyber risk.
10 articles on AI-driven incidents, cyber resilience, supply-chain testing, AI governance, security evidence and wider executive risk.
