risk-management

The Office of Personnel Management has quietly opened the federal doors to mainstream generative AI by making Microsoft 365 Copilot Chat and OpenAI’s ChatGPT available to its workforce — a move that follows a string of rapid OneGov procurement deals and the launch of GSA’s USAi sandbox, and that...

Australian small and medium businesses are sprinting to adopt generative AI — often by pasting confidential company data into free consumer tools — and that rush is creating a clear, demonstrable security and compliance gap that needs urgent remediation. Background / Overview The latest...

Microsoft’s Purview team has positioned the product as the glue between governance, security, and responsible AI use inside Microsoft Fabric—announcing a set of targeted updates at FabCon that aim to make data in OneLake and Fabric workloads both safer and more discoverable for analytics and AI...

Dutch education and research network SURF’s Data Protection Impact Assessment (DPIA) of Microsoft 365 Copilot finds persistent privacy and safety gaps that make the service unsuitable for broad use in schools and research institutions — and even after ongoing talks with Microsoft, two of the...

The UK government’s recent trial of AI coding assistants has delivered striking headline figures — developers reporting almost an hour saved per working day, equivalent to roughly 28 working days a year — but the programme also exposes the tough trade‑offs that come with rapid AI adoption in...

Thai in‑house counsel and litigation teams face a 2025 inflection point: generative AI has moved from experimental “time‑saver” to a regulated, business‑critical toolset that must be evaluated for PDPA compliance, explainability, and defensibility before it is used on client matters. The Nucamp...

Satya Nadella’s admission that Microsoft “can do better” — made in the wake of sweeping layoffs, a newly enforced return-to-office policy, and a widening employee protest movement over the company’s cloud work — is the clearest public acknowledgment yet that the tech giant faces a crisis of...

Satya Nadella’s blunt admission that Microsoft must “rebuild trust” with its workforce landed at the center of a turbulent week for the company, as months of large-scale workforce reductions and a newly tightened return-to-office policy collided with employee activism and questions about...

Daikin’s Security Gateway is affected by a critical pre‑authentication password‑reset flaw that lets an unauthenticated attacker reset device credentials to the factory default and take control of the appliance and any connected systems — the issue is tracked as CVE‑2025‑10127 and rated highly...

Microsoft’s October deadline for Windows 10 support has arrived like a ringing bell for an industry that—by several measures—wasn’t ready: large numbers of consumer and corporate endpoints still run Windows 10, many organisations face compatibility and budget constraints, and the safety net...

USA TODAY's decision to run every Week 1 matchup through Microsoft Copilot produced a tidy, headline-friendly slate of predictions — and a revealing window into how modern large language models reason about sports: they reward established quarterbacks, prize defensive strength and coaching...

Microsoft’s decision to stop issuing free security updates for Windows 10 on 14 October 2025 has forced IT leaders into a binary choice: pay to buy time, or accelerate an estate-wide migration to Windows 11 — and the short-term cost of staying on Windows 10 could be measured in billions for...

Microsoft’s internal playbook has shifted decisively: the company has moved to restrict open employee forums, tighten campus access after a high‑profile sit‑in, and impose a phased three‑day‑a‑week return‑to‑office baseline for many staff — a package of measures that recasts Microsoft’s...

Microsoft’s decision to fold Anthropic’s models into Office 365 represents a deliberate, high-stakes recalibration of its AI supply chain — one that pares dependence on a single vendor, broadens technical options inside Copilot features, and reshapes enterprise risk calculations for productivity...

Microsoft’s security update guide lists CVE‑2025‑54911 as a use‑after‑free defect in Windows BitLocker that can be triggered by an authorized local user to elevate privileges on affected machines, creating a high‑impact local elevation‑of‑privilege risk that administrators must treat as urgent...

Microsoft’s security tracker now lists CVE-2025-54899 as a memory-safety flaw in Microsoft Excel that can lead to local code execution when a crafted spreadsheet is opened — an entry that joins a steady stream of Excel parsing bugs that remain a favored initial-access vector for attackers...

CISA’s KEV catalog grew again this week with the addition of two high‑risk router flaws tied to active exploitation, underscoring an uncomfortable reality for IT teams: inexpensive consumer and small‑office routers remain a prime target for adversaries and can pose outsized risk to enterprise...

Satya Nadella has publicly shown how he uses five short, repeatable ChatGPT-style prompts inside Microsoft Copilot to “supercharge” his executive workflow — calling Copilot “a new layer of intelligence spanning all my apps” and framing the assistant less as a drafting tool and more as a...

A wave of community test results and vendor confirmations this week has put the latest Windows 11 cumulative update under a harsh spotlight: several SSDs can disappear from Windows during sustained, large write operations after installing the August 12, 2025 update (KB5063878), with a...

Hotels face a crossroads: artificial intelligence promises smarter personalization and leaner operations, but when guest names, preferences or booking histories are casually copy-pasted into public chatbots the consequences can be legal, financial and reputational — as Amsterdam-based middleware...