Four Countries, Four Health Systems, the Same Cyber Risk Tier
By August 2026, four European countries, Poland, the UK, France and Germany, had entered the critical tier of a healthcare
Pre-Mortem: The Post Office’s Horizon Replacement
On 24 August 2026, the Post Office finally signed contracts with all three suppliers meant to replace Fujitsu’s Horizon system,
One Token, Three Tools Deep, 2,500 Companies Across Five Continents
One leaked automation token. Three tools deep. Over 2,500 organisations across five continents exposed. That is the entire anatomy of
The September AI Outage Had Two Real Causes. Almost Everyone Reported One.
On the morning of 3 September 2026, ChatGPT, Claude and Grok all failed within roughly ninety minutes of each other.
Three Regulators, Three Continents, One 72-Hour Deadline Nobody Is Ready For
Three regulators, on three different continents, converged on almost the same number this year, entirely independently. Washington set 72 hours.
93% Have Been Breached by Vulnerable AI Code. 30% Still Ship It Anyway.
Seventy per cent of developers believe AI-generated code carries more vulnerabilities than the code they write themselves. Thirty per cent
SAP Told Its Customers Which AI to Use. Three Per Cent Listened.
By February 2026, DSAG’s own Investment Report had already surfaced the gap SAP would spend the rest of the year
Your AI Steering Committee Meets Monthly. Your AI Ships Weekly.
Most AI governance committees meet on a monthly or quarterly cadence. Most AI systems do not wait for them. Anthropic’s
EU Cyber Resilience Act – Reporting Duty Begins on an Unfinished Platform
On 11 September 2026, the European Union’s Cyber Resilience Act began requiring manufacturers of products with digital elements to report
The Difference Between an AI Pilot and an AI Programme Is Who Gets Blamed When It Fails.
A pilot has no name attached to its failure. A programme does. That is the entire distinction, and almost nobody