The phrase “human-in-the-loop” sounds like governance. It suggests a person sitting at a checkpoint, applying judgment, catching errors before they reach the client. In practice, it has become what IBM’s Phaedra Boinodiris calls liability laundering : a human’s name gets attached to a decision they were never empowered to meaningfully review, while they are measured on…
The Scattered Spider complaint (July 2026) introduced something to public record: Microsoft’s Global Device Identifier , cited as g:6755467234350028 - a persistent, device-level identifier the FBI used to tie a suspect to a Windows installation across IPs and browsing history. A Microsoft representative described it as “a persistent, device-level identifier designed to uniquely…
The term “Prayer-Driven Development” was coined by Davor Pavleković for deployments where hope is your only strategy. That was before AI agents made it an industry standard. Everyone Did Their Part. Nobody Saw the Whole. You’ve been here. The prompt that needs “MANDATORY” in all caps. The instruction that says “DO NOT SKIP” because the model skipped it…
You deployed NVIDIA’s GH200 Grace Hopper for its unified CPU-GPU memory architecture - the selling point that makes it a powerhouse for AI and HPC workloads. What nobody mentioned: your operating system is silently placing sensitive data into GPU memory without explicit application intent. And NVIDIA has known about it since at least October 2025. Fourteen months ago, I wrote about the…
Apple’s Foundation Models framework ships with macOS 26+, silently powering Apple Intelligence features. But what if you want to use it directly? Not through Siri. Not through Writing Tools. Through an API you control. apfel is an open-source OpenAI-compatible server that exposes Apple’s on-device LLM to any HTTP client. No API keys. No usage limits. No network calls. Just a local…
Or: What Happens When Everyone Can Ship Everything and Nobody Can Keep Anything March 23, 2026. OpenAI publishes “Creating with Sora Safely” . Polished blog post. Safety architecture. Content protections. The future of video generation. March 24, 2026. They kill it . The reasons came later - reallocating compute ahead of IPO , “trade-offs on products with high compute…
Everyone makes mistakes. Journalists work under pressure. Deadlines are real. A fuel crisis two days before an election is genuinely stressful - for reporters and citizens alike. But what happened on March 20-21, 2026, wasn’t one rushed article. It was a dozen outlets making the same mistake, in the same direction, at the same time, about the same anonymous tool, 48 hours before…
As someone tracking EU regulatory developments alongside ISO compliance and cryptography standards, the revised Network and Information Security Directive (NIS2) represents the most comprehensive update to European cybersecurity requirements since the original 2016 directive. What makes this particularly relevant for InfoSec professionals is the explicit integration of post-quantum cryptography…
Or: How to Cut Headcount and Multiply Costs The Pitch vs. The Spreadsheet You’ve seen the headlines. You’ve attended the boardroom presentations. Some consultant with expensive slides told you AI will “transform your workforce” and you nodded along while mentally calculating severance packages. Before you start drafting those redundancy letters, let’s talk numbers.…
Building an AI Governance Practice in Slovenia I’m co-founding an AI consulting and auditing startup for SMEs. We help companies that are too big to ignore AI, too small for expensive international consultants. What I Actually Do Consulting & Implementation: ISO 42001 AI Management Systems, ISO 27001 Information Security. I help organizations build governance frameworks that actually work.…
2025 was the year of simplification. Complex workflows collapsed into a few buttons. The distance between “I want this” and “done” is approaching zero. Soon we’ll be generating things through neural interfaces paired with AI agents. (Screenshot this.) Now everyone can make anything - and everyone does. Content factories pump out AI-generated slop at industrial scale.…
Does your online marketplace publish user-generated listings without verifying the personal data they contain? A landmark ruling from the Court of Justice of the European Union in Russmedia Digital (C-492/23) just fundamentally changed how platforms must handle personal data - and the compliance burden is substantial. Marketplaces Are Now Data Controllers The Court ruled that marketplace operators…
Is your organization prepared for the AI governance standards that are reshaping professional services? KPMG in the U.S. has achieved a significant milestone by becoming the first of the Big Four accounting firms in the country to receive ISO 42001 certification - the world’s first international standard for Artificial Intelligence Management Systems (AIMS) . Why This Certification Matters…
Are you still building your compliance framework around the current GDPR, AI Act, and Data Act requirements? The European Commission just published the most sweeping reform of EU digital laws since 2018 - and everything you thought you knew about data protection compliance might be about to change. The Regulatory Earthquake You Can’t Ignore On 19 November 2025, the European Commission…
Is your organization using automated decision-making systems without fully understanding the transparency requirements? The Hamburg Commissioner for Data Protection’s recent €492,000 fine against a financial services provider should serve as your wake-up call. The Case That Changes Everything The Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI) imposed this…
Have you ever wondered what happens when artificial intelligence enters the courtroom? A UK First-Tier Tribunal judge recently provided a notable answer, becoming one of the first to openly disclose using AI in drafting a judicial decision - and the implications extend far beyond the legal profession. A Notable Step Toward Transparency In Evans v HMRC , Judge Christopher McNall made legal history…
Are you prepared for the regulatory shift that could redefine how your business operates with AI? Italy has just made history by becoming the first European Union member state to pass comprehensive national artificial intelligence legislation, and the implications extend far beyond Italian borders. The Landmark Decision That Changes Everything On September 17, 2025, the Italian Parliament approved…
Are you deploying AI agents without understanding the legal minefield you’re navigating? While competitors rush to automate processes with intelligent agents, smart organizations are discovering that regulatory compliance - not just functionality - determines long-term success. The Multi-Framework Challenge That’s Catching Everyone Off Guard AI agents don’t operate in a…
Have you ever wondered what happens when artificial intelligence meets the courtroom? California just provided a stark answer, issuing a $10,000 fine to a lawyer who submitted a court appeal filled with fabricated quotes generated by ChatGPT . The Wake-Up Call Your Legal Department Needs This case represents the first such sanction at the state appellate level, but it’s not the…
Are you still manually handling tasks that your competitors are automating with intelligent AI agents ? While you’re drowning in repetitive workflows, forward-thinking businesses are deploying AI agents that think, decide, and act autonomously - and they’re doing it faster than ever with platforms like n8n . The AI Agent Reality Check AI agents aren’t just chatbots with fancy…
Are you certain your pseudonymised data transfers comply with GDPR ? A significant ruling from the Court of Justice of the European Union (CJEU) on September 4, 2025, has provided important clarification on when pseudonymised data qualifies as personal data - and the implications could refine your data management strategy. The Ruling That Provides Clarity In the case of European Data Protection…
Are you prepared for the executive role that’s quietly becoming one of the most discussed positions in modern corporate governance? While companies scramble to implement artificial intelligence solutions, a new breed of executive is emerging to navigate the complex intersection of technology, ethics, and regulatory compliance: the AI Officer. The Rise of the AI Officer: More Than Just…
Are you building your AI startup without considering the regulatory framework that could make or break your venture? While entrepreneurs rush to deploy the latest artificial intelligence solutions, the smartest founders are looking to an unexpected mentor: the aviation industry. The Striking Parallels You Can’t Ignore Just as aviation transformed from experimental flights to a…
Are you confident that your pseudonymized data transfers comply with GDPR ? A significant ruling from the Court of Justice of the European Union (CJEU) on September 4, 2025, has provided welcome clarity for how organizations handle supposedly “anonymized” information. The Ruling That Clarifies Data Privacy The CJEU’s latest decision in the case of European Data Protection…
Are your organization’s Large Language Model (LLM) servers broadcasting sensitive information to the entire internet? A new Cisco security study using Shodan search engine data reveals a troubling reality: thousands of Ollama LLM servers are running with misconfigured settings, creating potential entry points for attackers. The Scale of Exposure Cisco’s research team discovered…
Picture this: You walk into your office tomorrow and meet your new colleague - a collaborative robot , or “cobot,” designed to work alongside you. This isn’t science fiction; it’s the reality of Industry 5.0 , where human-robot collaboration is transforming workplaces across manufacturing, healthcare, and service industries. The Shift from Automation to Collaboration Unlike…
Are your AI systems creating a perfect storm for data theft? Security researcher Simon Willison’s recent analysis reveals a chilling reality: AI agents combining three specific capabilities create what he calls the “lethal trifecta” - a combination so dangerous that attackers can easily trick systems into accessing private data and sending it directly to them. The Three…
Are you treating AI safety and AI security as the same thing? If so, your organization might be missing critical vulnerabilities that could compromise both your operations and compliance posture. The Dangerous Misconception While many languages use the same word for both concepts, the OECD emphasizes that AI safety and security are distinct yet interconnected domains that require different…
Are you still managing governance, risk, and compliance (GRC) with yesterday’s tools while your competitors leverage AI to transform their operations? The integration of artificial intelligence into GRC strategies isn’t just a technological upgrade - it’s becoming a competitive necessity that could determine your organization’s survival in an increasingly complex regulatory…
Are you prepared for the autonomous AI revolution that’s already knocking at your door? While Gartner identifies agentic AI as a strategic trend for 2025 , there’s a critical piece of the puzzle that most professionals are overlooking: ISO/IEC 42005:2025 . The Agentic AI Reality Check Agentic AI systems don’t just respond to prompts - they plan, execute, and act autonomously…
Are you prepared for the most significant data regulation since GDPR ? With just 30 days remaining until the EU Data Act becomes applicable on September 12, 2025, companies across Europe are scrambling to understand requirements that will fundamentally reshape how they handle connected device data. Note: The EU Data Act entered into force on January 11, 2024, giving companies nearly two years to…
When Sweden’s Prime Minister Ulf Kristersson admitted using ChatGPT to get a “second opinion” on policy matters in August 2025, the backlash was swift. “We didn’t vote for ChatGPT,” critics declared. While this incident has sparked important debates about transparency in government, it also highlights broader questions about how organizations should manage…
A Practical Guide for InfoSec Professionals and Auditors As someone working daily with ISO standards and AI governance frameworks, I’ve been closely following NIST’s post-quantum cryptography (PQC) standardization process. What I’ve discovered should concern every InfoSec professional: the threat to our current encryption isn’t waiting for some hypothetical quantum…
Are your AI systems as secure as you think? Recent research from NVIDIA’s AI Red Team reveals a concerning reality: attackers can now bypass some AI guardrails using something as simple as emoji sequences and visual symbols. The Invisible Threat in Plain Sight Semantic prompt injections represent an emerging frontier in adversarial attacks against AI systems. Unlike traditional prompt…
Are you confident your European data is truly protected from foreign surveillance? Microsoft’s recent admission under oath has raised important questions about data sovereignty, but the full picture is more nuanced than initial headlines suggest. The Uncomfortable Truth - And Microsoft’s Response Microsoft has publicly acknowledged that it cannot guarantee data sovereignty for…
Picture this scenario: You’re working late, relying on your trusted AI coding assistant to help debug a critical application. Unknown to you, that same assistant has been compromised and is quietly preparing to execute commands that could wipe your entire development environment - both local files and cloud infrastructure. This isn’t a hypothetical nightmare. It actually happened to…
When was the last time you considered whether your AI tools truly understand your customers’ native languages? If you’re operating in Europe’s diverse linguistic landscape, Microsoft’s latest announcement should make you pause and reassess your digital strategy. The Wake-Up Call Europe Needed Microsoft recently launched two initiatives that could reshape how AI serves…
Is your organization prepared for the seismic shift coming to AI governance this August? The European Commission has just published its voluntary General-Purpose AI Code of Practice (GPAI-CoP) , and while “voluntary” might sound reassuring, the practical reality is far more complex. The August 2025 Deadline That Changes Everything When the EU AI Act takes full effect on August 2, 2025…
English Translation Context Slovene Example English Example Safety General protection from harm “Varnost na delovnem mestu” “Workplace safety” Security Protection from threats/attacks “Nacionalna varnost” “National security” Protection Shielding from danger “Varnost podatkov” “Data protection” Safeguarding Active protection…
Is your company using AI tools to generate content, analyze data, or automate processes? The European Court of Justice (ECJ) has just received its first referral concerning artificial intelligence and copyright law - and the outcome could fundamentally change how you operate. The Case That Could Change Everything The landmark case, Like Company versus Google Ireland, centers on a critical…
Are you rushing to procure AI solutions for your financial services firm without considering the legal minefield you’re entering? While competitors scramble to deploy the latest AI tools, smart institutions are discovering that procurement strategy - not just implementation - determines compliance success . The Procurement Blind Spot That’s Costing Millions Most financial institutions…
Do you think your professional emails belong to your employer? Think again. A recent legal clarification has confirmed that professional emails can contain personal data under the General Data Protection Regulation (GDPR) - but the reality is more nuanced than many headlines suggest, and this ruling could fundamentally change how your workplace handles your communications. The Ruling That Matters…
Are you rushing to implement Model Context Protocol (MCP) for your AI automation workflows? Before you do, consider this sobering reality: MCP may be creating more security vulnerabilities than it solves . The Promise vs. The Reality MCP promises seamless integration between Large Language Models (LLMs) and third-party tools, positioning itself as the standard for AI-driven automation. Companies…
Are you building on blockchain technology without considering the privacy compliance minefield you’re walking into? The European Data Protection Board’s (EDPB) latest guidelines reveal a fundamental incompatibility between blockchain’s core features and GDPR requirements that could derail your digital transformation plans. The Immutability Problem Blockchain’s greatest…
Picture this: your company just announced ambitious net-zero commitments while simultaneously deploying AI systems that could consume as much electricity as 120 homes annually. Sound contradictory? You’re not alone - and you might be unknowingly undermining your Environmental, Social, and Governance (ESG) objectives. The Staggering Reality of AI’s Energy Appetite The numbers are…
Are you still manually juggling repetitive tasks while your competitors automate their way to efficiency? The explosive growth of n8n, a workflow automation platform that hit $7.2 million in revenue in 2024 with just 59 employees, signals a fundamental shift in how businesses approach operational efficiency. For those new to the concept, workflow automation is the process of streamlining and…