by Gary Zimmerman | Oct 12, 2026 | AI, Cybersecurity, Governance, Identity
Last week I asked where your AI policy actually fires LINK: Your AI Policy Isn’t a Control Until It Fires. This week I want to ask what happens after it fires. Can you prove it did? Here’s the scenario I keep coming back to. An agent in your environment...
by Gary Zimmerman | Oct 5, 2026 | AI, Governance, Identity
Last week I asked which way your guardrails fail when they stop working Which Way Does Your Guardrail Fail?. This week I want to back up a step and ask something more basic. Is your AI policy connected to anything at all? That sounds like a rhetorical question. It...
by Gary Zimmerman | Sep 14, 2026 | AI, Governance, Identity
The governance architecture that Black Hat 2026 defined — the five-layer control plane for AI agents built from identity outward — depends on a premise that most enterprise identity programs have not yet confronted: role-based access control does not work for AI...
by Kevin Kampman | Aug 4, 2026 | AI, Governance
This morning I attended a Technology First Cybersecurity session at the Digital Transformation Center in Dayton Ohio. It was my first introduction to the center. it is a significant focal point for Ohio educational, governmental and commercial interests, hosted by...
by Gary Zimmerman | Aug 4, 2026 | AI, Governance, Identity
On July 28, Cyera announced it was acquiring Oasis Security for $1 billion. The same day, Hush Security announced a $30 million Series A. Two days later, Okta announced it was acquiring Permiso Security — financial terms undisclosed, but strategically significant...
by Gary Zimmerman | Jul 27, 2026 | AI, Governance
On July 16, 2026, Hugging Face detected a cyberattack powered by an autonomous AI agent. The intrusion was found by Hugging Face’s own AI. The attacker had accessed internal datasets and credentials. No passwords were stolen in the conventional sense. No malware...
by Gary Zimmerman | Jul 20, 2026 | AI, Governance
Federal agencies have AI policies. Far fewer have AI evidence. That distinction separates organizations that can survive an audit, an OMB review, or a congressional inquiry from those that can only describe good intentions. For CISOs and technical architects, the...
by Gary Zimmerman | Jul 13, 2026 | AI, Governance
On June 16, 2026, the European Parliament adopted the Digital Omnibus on AI by 423 votes to 57. On June 29, the Council of the European Union formally adopted it, completing the co-legislative process. The headline that most compliance teams forwarded to their...
by Gary Zimmerman | Jul 7, 2026 | AI, Cybersecurity, Governance
On December 23, 2025, the FDA cleared a software medical device called UpDoc under 510(k) number K253281. The clearance got relatively little attention when it was issued. When UpDoc announced $18 million in seed financing on June 25, 2026 — alongside initial...
by Gary Zimmerman | Jun 29, 2026 | AI, Cybersecurity, Governance
On April 17, 2026, the Federal Reserve, OCC, and FDIC issued SR 26-2 — the first rewrite of model risk management guidance since SR 11-7 in 2011. It superseded fifteen years of supervisory expectations. It clarified scope. It introduced a risk-based, proportional...
Recent Comments