#risk-management — Public Fediverse posts

What happens when attackers weaponize cellular-based IoT?

In this Nexus Podcast episode, Rapid7's Deral Heiland breaks down the #cybersecurity risks of connected #IoT devices—from unauthorized access and data exfiltration to potential pivots into backend infrastructure.

🎧 Full episode here: https://nexusconnect.io/podcasts/deral-heiland-on-weaponizing-cellular-based-iot

#VulnerabilityManagement #RiskManagement #OperationalResilience

Can You Name Every AI Running in Your Organization Right Now? https://youtu.be/IY1-RAgeSo4 #AIGovernance #ArtificialIntelligence #GenerativeAI #AgenticAI #AIAgents #Cybersecurity #RiskManagement #DataGovernance #ShadowAI #ResponsibleAI #AICompliance #CISO #BoardroomCybersecurity

SaaS vendors should assess whether their trust boundary includes customers' AI agents. Liability has pushed banks toward securing the customer's device four times, and the fifth wave is forming around AI agents.

https://zeltser.com/saas-ai-agent-trust-boundary

#riskmanagement #artificialintelligence

Iran Detains Tanker Sanctioned by US for Carrying Iranian HSFO

The IRGC Navy seized the 72,768 DW…
#NewsBeep #News #BreakingNews #box #breakingnews #bunker #bunkerfuel #bunkerindications #bunkernews #bunkerprices #bunkering #Companies #compliance #credit #Cruise #Enforcement #etc #Iran #IranConflict2026 #IranIslamicRepublicof #Legal:Legislation #marinefuel #marinenews #organisations #people #prices #RiskManagement #ShippingMarkets:DryBulk #shippingnews #tanker
https://www.newsbeep.com/527097/

Most hantavirus is a dead-end infection. The Andes strain isn't.

A cruise ship outbreak in the Atlantic is reminding us that emerging pathogens don't follow cruise schedules-they follow biology. Global risk remains low, but the transmission window is narrow and real.

Pandemic prep isn't paranoia. It's pattern recognition.

#Hantavirus #PandemicPrep #EmergingPathogens #PublicHealth #Biosecurity #EpidemicResponse #HealthSecurity #ViralOutbreak #RiskManagement #InfectiousDiseases

Was passiert, wenn Handy-Netze, Zahlungsverkehr und Krankenhäuser gleichzeitig offline gehen? 📵 Der neue Bericht von ITU & UNDRR warnt vor einer „digitalen Pandemie“. Lokale Störungen in Seekabeln oder Rechenzentren können globale Krisen auslösen. Wir brauchen dringend mehr digitale Resilienz!

Details (EN):
🔗 https://www.unognewsroom.org/story/en/3110/press-briefing-itu-and-undrr
🔗 https://www.itu.int/en/mediacentre/Pages/PR-2026-05-05-Critical-Digital-Risks-report.aspx
🔗 https://www.itu.int/hub/publication/s-rep-wtisd-2026/

#DigitalResilience #ITU #UNDRR #RiskManagement

Went to a #Dementia care place.

Shock #1 was walking around looking for my relative, walked through the lounge where many of the residents seem to sit most of the day.
Couldn't see him.
But he was there.
In the last week he's got to blending in.

#2 was seeing him walking with a zimmerman frame, sway backwards, then lean forward onto the frame.
The frame slid forward (with the brakes on).
He fell.
#ZimmermanFrame #EquipmentFailure #RiskManagement #Falls #SwapRisks #AgedCare #IatrogenicInjury

Federal funding has entered the field. Infrastructure has not.
$50M is now directed toward psychedelic therapy for veterans. Clinical trials are expanding. Therapist training is underway. Active-duty enrollment is next.

#PsychedelicPolicy #MentalHealthSystems #VeteranCare #ClinicalResearch #RiskManagement

Uh-oh, KeePassXC is about to slurp the slop:
https://keepassxc.org/blog/2025-11-09-about-keepassxcs-code-quality-control/
Alternative: https://codeberg.org/keepasschi/ChiPass #riskcontrol #riskmanagement #risks

Markets reaching for the Moon while the geopolitical order on Earth is unravelling is a sight to behold. Are dumbified TACO, FOMO, TINA, Mag 7 etc. evidence of Tainter's diminishing returns from social complexity? I.e. the world losing it? #econsky #riskmanagement en.wikipedia.org/wiki/Joseph_...

Joseph Tainter - Wikipedia

AI Governance Is Racing Behind AI Adoption
https://youtu.be/v7XcaUeS1xY #AIGovernance #CyberSecurity #ArtificialIntelligence #AIRisk #GenAI #AgenticAI #InfoSec #DataPrivacy #CyberRisk #CISO #TechPolicy #AICompliance #DigitalTransformation #RiskManagement #AIAdoption

Claude AI agent’s confession after deleting a firm’s entire database: ‘I violated every principle I was given’
The Guardian https://www.theguardian.com/technology/2026/apr/29/claude-ai-deletes-firm-database #cybersecurity #AI #AgenticAI #riskmanagement #Anthropic

⚖️ “Risk is managed, not avoided.”

#Markets #Investing #StoneCapitalGrowth #RiskManagement #Discipline #SocialMedia

Anthropic’s Mythos was labeled “too dangerous,” prompting Project Glasswing. This piece examines the balance between innovation and safety, and the cybersecurity implications for organizations. Read the full analysis: https://wix.to/nsycT0g

#AI
#CyberSecurity
#ResponsibleAI
#TechLeadership
#RiskManagement

An AI coding agent wiped out a company's entire production database and every backup in just 9 seconds. The AI agent later confessed, in its own words, that it guessed a destructive action would be scoped to the staging environment, didn't verify, didn't read the docs, and just did it anyway. 🤦🏻‍♂️ Everyone's blaming the AI. I'm looking at the humans who handed it the keys. This wasn't a rogue model. It was a predictable outcome of predictable choices:

- A CLI token with blanket permissions across all environments
- Backups stored on the same volume as the data they're meant to protect
- A cloud provider whose API executes destructive commands with zero confirmation step
- An agent given access to production while the team thought it was safely contained in staging

The founder is now manually reconstructing customer bookings from Stripe logs and calendar integrations. Every one of his customers is doing the same because of a 9-second API call. AI agents don't have judgment. They have instructions and permissions. Whatever permissions you grant, assume they will eventually be used in the worst possible sequence at the worst possible moment. That's not pessimism, it's how you architect resilient systems. Separate your environments. Scope your tokens. Store backups offline and off-volume. Require confirmation before any destructive operation. These aren't AI-era lessons. They're 30-year-old lessons that people keep skipping because the tooling makes it easy to skip them. The speed AI can act is new. The failure modes underneath it are not.
https://www.tomshardware.com/tech-industry/artificial-intelligence/claude-powered-ai-coding-agent-deletes-entire-company-database-in-9-seconds-backups-zapped-after-cursor-tool-powered-by-anthropics-claude-goes-rogue
#AI #Cybersecurity #RiskManagement

SaaS vendors that make their products usable by customers' AI agents inherit those agents' attack surface. Liability and regulation drove banks into that position four times already. The same pressure is building for agent-era vendors now.

https://zeltser.com/saas-ai-agent-trust-boundary

#riskmanagement #artificialintelligence

Introduction to the NIST Risk Management Framework:

This post covers:
• What the NIST RMF is and why it matters
• The seven steps of the framework
• How it fits into a broader security program

Read here: https://graylog.org/post/an-introduction-to-the-nist-risk-management-framework-rmf/

#Cybersecurity #NIST #RiskManagement #Compliance #RMF

Bitcoin blocks usually take about 10 minutes to confirm. According to new research from Google, quantum key derivation might only take around 9 minutes. That similarity is hard to overlook.

The main point isn’t that quantum computers will eventually break crypto—we’ve expected that. What matters now is that Google has reduced the estimated resources needed by about 20 times. That means fewer qubits, fewer gate operations, and shorter timelines. Plus, 1.7 million BTC are stored in old address formats where the public key is already visible. Attackers wouldn’t have to hurry; they could take as long as they want. 🔓

The crypto industry often sees upgrades like SegWit and Taproot as successes, and they are. However, Taproot brought back direct public key exposure for different reasons. Now, every design choice in crypto has a quantum aspect, whether teams realize it or not.

⏳ The threat isn’t immediate, but the time to prepare is now—and that window won’t last forever.
🏛️ If your organization holds digital assets, you should add post-quantum cryptography to your risk register now, not two years from now.

https://www.ccn.com/education/crypto/google-quantum-computers-break-bitcoin-ethereum-9-minutes-1-7m-btc-risk/
#Cybersecurity #QuantumComputing #Crypto #RiskManagement #Blockchain

Anthropic spent months carefully gatekeeping access to Mythos, their most capable AI model, while limiting access only to a small group of vetted companies for defensive cybersecurity testing. Then a private online forum got in anyway, through a third-party vendor, on the same day the controlled program was announced.

That's the part worth sitting with. Not the model. The vendor. Third-party vendors... It's always the the 3td party vendor. 🤦🏻‍♂️ You can build the most carefully controlled AI release program in the industry, and one weak link in your supply chain burns it down. We keep having this conversation about AI safety and regulation, and we keep forgetting that the threat surface isn't just the model. It's every partner, every integration, every environment touching it. 🔗 Everything's connected. Everything.

🤔 Ask yourself: how many third parties have access to your most sensitive systems right now? Do you actually know?
⚠️ Vendor risk management isn't a compliance checkbox. It's where your security posture actually lives or dies.

https://www.yahoo.com/news/articles/anthropics-mythos-model-accessed-unauthorized-214920132.html
#Cybersecurity #AI #VendorRisk #InfoSec #RiskManagement #security #privacy #cloud #infosec

Integrated Data-Driven Multi-Criteria Analysis and Machine Learning Approaches for Assessment of Flood Susceptibility Mapping
--
https://doi.org/10.3390/w18070844 <-- shared paper
--
https://youtu.be/N7nyU1cMg5k?si=8WuXIaz4-JKPdCE0 <-- shared video, Mohmand Dam flooding
---
#FloodSusceptibility #FloodMapping #MachineLearning #GIS #RemoteSensing #Hydrology #Water #EnvironmentalResearch #AHP #FAHP #climatechange #extremeweather #GoogleEarthEngine #GIS #spatial #mapping #AI #model #modeling #MohmandDam #SwatRiver #Pakistan #machinelearning #AI #criteria #parameters #indices #rainfall #precipitation #LULC #soiltexture #planning #policy #water #hydrology #hydrography #riskmanagement #risk #hazard #flood #flooding #mitigation #watershed #watermanagement #resilence

Agentic AI isn't just a tool. It's a risk companies need to manage.
https://www.korte.co/5v8o
#AI #AgenticAI #riskmanagement