DISC Infosec blog https://blog.deurainfosec.com/ Dedicated to information security assurance Information Security subject matter with related items Wed, 06 May 2026 20:32:00 +0000 en-US hourly 1 https://wordpress.org/?v=6.1.10 https://blog.deurainfosec.com/wp-content/uploads/2023/05/disc-logo-144x144.jpg DISC InfoSec blog https://blog.deurainfosec.com/ 32 32 7400975 LinkedIn Job Scams Are Surging: Why Your Hiring Pipeline Is Now an Attack Surface https://blog.deurainfosec.com/linkedin-job-scams-are-surging-why-your-hiring-pipeline-is-now-an-attack-surface/ https://blog.deurainfosec.com/linkedin-job-scams-are-surging-why-your-hiring-pipeline-is-now-an-attack-surface/#respond Wed, 06 May 2026 20:25:38 +0000 https://blog.deurainfosec.com/?p=35008 LinkedIn has become the world’s default professional identity layer—but it’s now equally a high-value attack surface. The latest report highlights a sharp rise in job scams, with recruiter impersonation and fake roles eroding trust across the hiring ecosystem. When over a third of recruiters themselves report impersonation and candidates increasingly demand verification, we’re no longer […]

The post LinkedIn Job Scams Are Surging: Why Your Hiring Pipeline Is Now an Attack Surface appeared first on DISC InfoSec blog.

]]> https://blog.deurainfosec.com/linkedin-job-scams-are-surging-why-your-hiring-pipeline-is-now-an-attack-surface/feed/ 0 35008 AI Governance by Default, Not by Design: Who Actually Owns It in Your Organization? https://blog.deurainfosec.com/ai-governance-by-default-not-by-design-who-actually-owns-it-in-your-organization/ https://blog.deurainfosec.com/ai-governance-by-default-not-by-design-who-actually-owns-it-in-your-organization/#respond Tue, 05 May 2026 16:16:43 +0000 https://blog.deurainfosec.com/?p=34965 Who Actually Owns AI Governance? An InfoSec & AI Governance Reading of the IAPP Conversation The IAPP’s Ashley Casovan, in a recent AdExchanger interview, surfaces what is quickly becoming the most uncomfortable question inside enterprise compliance functions: when an AI tool is deployed, who actually owns the governance of it? Privacy teams have spent years […]

The post AI Governance by Default, Not by Design: Who Actually Owns It in Your Organization? appeared first on DISC InfoSec blog.

]]> https://blog.deurainfosec.com/ai-governance-by-default-not-by-design-who-actually-owns-it-in-your-organization/feed/ 0 34965 The Adversary Already Adopted AI. Did Your Defense? https://blog.deurainfosec.com/the-adversary-already-adopted-ai-did-your-defense/ https://blog.deurainfosec.com/the-adversary-already-adopted-ai-did-your-defense/#respond Mon, 04 May 2026 21:02:29 +0000 https://blog.deurainfosec.com/?p=34895 Defenders Coordinate Slowly. Adversaries Move at Machine Speed. Microsoft just confirmed what every CISO has been quietly bracing for: Nation-state cyber programs are now running on AI — and they’re moving at machine speed. In a sharp new interview with Help Net Security, Microsoft’s Kaja Ciglic (Senior Director, Cybersecurity Policy & Diplomacy) lays out the […]

The post The Adversary Already Adopted AI. Did Your Defense? appeared first on DISC InfoSec blog.

]]> https://blog.deurainfosec.com/the-adversary-already-adopted-ai-did-your-defense/feed/ 0 34895 When the Most Safety-Focused AI Company Misses the Basics: A Governance Wake-Up Call https://blog.deurainfosec.com/when-the-most-safety-focused-ai-company-misses-the-basics-a-governance-wake-up-call/ https://blog.deurainfosec.com/when-the-most-safety-focused-ai-company-misses-the-basics-a-governance-wake-up-call/#respond Mon, 04 May 2026 17:09:13 +0000 https://blog.deurainfosec.com/?p=34883 When the Most Safety-Focused AI Company Misses the Basics: A Governance Wake-Up Call In the span of a single week, Anthropic — arguably the most safety-conscious AI company in the industry — experienced two back-to-back operational governance failures. Neither was a sophisticated breach. The first involved draft materials for an unreleased model (now public as […]

The post When the Most Safety-Focused AI Company Misses the Basics: A Governance Wake-Up Call appeared first on DISC InfoSec blog.

]]> https://blog.deurainfosec.com/when-the-most-safety-focused-ai-company-misses-the-basics-a-governance-wake-up-call/feed/ 0 34883 Claude Security Goes Public: A Turning Point for AI-Driven DevSecOps—and a New Governance Challenge https://blog.deurainfosec.com/claude-security-goes-public-a-turning-point-for-ai-driven-devsecops-and-a-new-governance-challenge/ https://blog.deurainfosec.com/claude-security-goes-public-a-turning-point-for-ai-driven-devsecops-and-a-new-governance-challenge/#respond Mon, 04 May 2026 16:31:46 +0000 https://blog.deurainfosec.com/?p=34878 Anthropic has expanded access to its AI-driven security capability, Claude Security, moving it into a broader public beta for enterprise users. The solution is designed to help organizations identify vulnerabilities in their codebases and automatically generate remediation fixes, signaling a shift toward AI-assisted secure software development at scale. At its core, Claude Security applies advanced […]

The post <strong>Claude Security Goes Public: A Turning Point for AI-Driven DevSecOps—and a New Governance Challenge</strong> appeared first on DISC InfoSec blog.

]]> https://blog.deurainfosec.com/claude-security-goes-public-a-turning-point-for-ai-driven-devsecops-and-a-new-governance-challenge/feed/ 0 34878 The AI Oversight Gap: When Confidence Outpaces Control https://blog.deurainfosec.com/the-ai-oversight-gap-when-confidence-outpaces-control/ https://blog.deurainfosec.com/the-ai-oversight-gap-when-confidence-outpaces-control/#respond Thu, 30 Apr 2026 17:24:07 +0000 https://blog.deurainfosec.com/?p=34817 The AI Oversight Gap: When Adoption Outpaces Governance AI has quietly graduated from pilot project to production infrastructure. It’s writing code, drafting contracts, screening candidates, and processing customer data across functions most organizations couldn’t fully map if asked. The technology has scaled. The governance hasn’t. New research spanning more than 800 GRC, audit, and IT […]

The post The AI Oversight Gap: When Confidence Outpaces Control appeared first on DISC InfoSec blog.

]]> https://blog.deurainfosec.com/the-ai-oversight-gap-when-confidence-outpaces-control/feed/ 0 34817 The AI Governance Quick-Start: Defensible in 10 Days, Not 4 Quarters https://blog.deurainfosec.com/the-ai-governance-quick-start-defensible-in-10-days-not-4-quarters/ https://blog.deurainfosec.com/the-ai-governance-quick-start-defensible-in-10-days-not-4-quarters/#comments Wed, 29 Apr 2026 17:52:09 +0000 https://blog.deurainfosec.com/?p=34767 The AI Governance Quick-Start: Defensible in 10 Days, Not 4 Quarters AI governance doesn’t fail because of frameworks—it fails because it never starts. The AI Governance Quick-Start changes that. In just 7–10 business days, you move from uncertainty to a defensible position aligned with NIST AI Risk Management Framework, EU AI Act, and ISO/IEC 42001—without […]

The post The AI Governance Quick-Start: Defensible in 10 Days, Not 4 Quarters appeared first on DISC InfoSec blog.

]]> https://blog.deurainfosec.com/the-ai-governance-quick-start-defensible-in-10-days-not-4-quarters/feed/ 3 34767 AI Security Tool Evaluation: A Reality Check for CISOs https://blog.deurainfosec.com/ai-security-tool-evaluation-a-reality-check-for-cisos/ https://blog.deurainfosec.com/ai-security-tool-evaluation-a-reality-check-for-cisos/#respond Tue, 28 Apr 2026 16:15:43 +0000 https://blog.deurainfosec.com/?p=34701 AI Security Tool Evaluation: A Reality Check for CISOs Artificial intelligence is fundamentally reshaping how applications are built, deployed, and attacked. Unlike traditional systems, AI introduces a dynamic and unpredictable attack surface—especially with the rise of agentic AI that can act autonomously. This shift demands a completely new approach to security evaluation. Most organizations are […]

The post AI Security Tool Evaluation: A Reality Check for CISOs appeared first on DISC InfoSec blog.

]]> https://blog.deurainfosec.com/ai-security-tool-evaluation-a-reality-check-for-cisos/feed/ 0 34701 How to Answer AI Questions on Your Vendor Assessment (Without Stalling the Deal) https://blog.deurainfosec.com/how-to-answer-ai-questions-on-your-vendor-assessment-without-stalling-the-deal/ https://blog.deurainfosec.com/how-to-answer-ai-questions-on-your-vendor-assessment-without-stalling-the-deal/#respond Tue, 28 Apr 2026 02:24:54 +0000 https://blog.deurainfosec.com/?p=34743 How to Answer AI Questions on Your Vendor Assessment (Without Stalling the Deal) Eighteen months ago, “Do you use AI?” was a footnote on a vendor questionnaire. Today it is a deal-blocker. Procurement teams at banks, healthcare systems, and even mid-market SaaS buyers now routinely send 40 to 80 AI-specific questions before signing a contract. […]

The post How to Answer AI Questions on Your Vendor Assessment (Without Stalling the Deal) appeared first on DISC InfoSec blog.

]]> https://blog.deurainfosec.com/how-to-answer-ai-questions-on-your-vendor-assessment-without-stalling-the-deal/feed/ 0 34743 Most AI Security Tools Won’t Pass an Audit. Here’s a 15-Minute Way to Find Out. https://blog.deurainfosec.com/most-ai-security-tools-wont-pass-an-audit-heres-a-15-minute-way-to-find-out-2/ https://blog.deurainfosec.com/most-ai-security-tools-wont-pass-an-audit-heres-a-15-minute-way-to-find-out-2/#comments Mon, 27 Apr 2026 20:26:52 +0000 https://blog.deurainfosec.com/?p=34730 Most AI Security Tools Won’t Pass an Audit. Here’s a 15-Minute Way to Find Out. An effective CISO-grade scorecard that puts your AI security tool through the questions an assessor will actually ask — and maps every gap to NIST AI RMF and ISO 42001. Walk into any AI security vendor demo and the choreography […]

The post <strong>Most AI Security Tools Won’t Pass an Audit. Here’s a 15-Minute Way to Find Out.</strong> appeared first on DISC InfoSec blog.

]]> https://blog.deurainfosec.com/most-ai-security-tools-wont-pass-an-audit-heres-a-15-minute-way-to-find-out-2/feed/ 2 34730 Most AI Security Tools Won’t Pass an Audit. Here’s a 15-Minute Way to Find Out. https://blog.deurainfosec.com/most-ai-security-tools-wont-pass-an-audit-heres-a-15-minute-way-to-find-out/ https://blog.deurainfosec.com/most-ai-security-tools-wont-pass-an-audit-heres-a-15-minute-way-to-find-out/#respond Mon, 27 Apr 2026 15:37:40 +0000 https://blog.deurainfosec.com/?p=34704 Most AI Security Tools Won’t Pass an Audit. Here’s a 15-Minute Way to Find Out. A free CISO-grade scorecard that puts your AI security tool through the questions an assessor will actually ask — and maps every gap to NIST AI RMF and ISO 42001. Walk into any AI security vendor demo and the choreography […]

The post Most AI Security Tools Won’t Pass an Audit. Here’s a 15-Minute Way to Find Out. appeared first on DISC InfoSec blog.

]]> https://blog.deurainfosec.com/most-ai-security-tools-wont-pass-an-audit-heres-a-15-minute-way-to-find-out/feed/ 0 34704 AI Governance in the Age of Mythos: Why Small Business Owners Can’t Afford to Wait https://blog.deurainfosec.com/ai-governance-in-the-age-of-mythos-why-small-business-owners-cant-afford-to-wait/ https://blog.deurainfosec.com/ai-governance-in-the-age-of-mythos-why-small-business-owners-cant-afford-to-wait/#respond Mon, 27 Apr 2026 14:30:27 +0000 https://blog.deurainfosec.com/?p=34660 AI Governance in the Age of Mythos: Why Small Business Owners Can’t Afford to Wait We are living in the age of mythos. Every week brings a new AI story: the tool that will replace your accountant, the chatbot that cost a company $10,000 in refunds, the startup that 10x’d its revenue with a single […]

The post AI Governance in the Age of Mythos: Why Small Business Owners Can’t Afford to Wait appeared first on DISC InfoSec blog.

]]> https://blog.deurainfosec.com/ai-governance-in-the-age-of-mythos-why-small-business-owners-cant-afford-to-wait/feed/ 0 34660 Why ISO 27701 Is No Longer Optional: A Privacy Wake-Up Call for U.S. Small Business Owners https://blog.deurainfosec.com/why-iso-27701-is-no-longer-optional-a-privacy-wake-up-call-for-u-s-small-business-owners/ https://blog.deurainfosec.com/why-iso-27701-is-no-longer-optional-a-privacy-wake-up-call-for-u-s-small-business-owners/#respond Sun, 26 Apr 2026 18:28:50 +0000 https://blog.deurainfosec.com/?p=34687 Why ISO 27701 Is No Longer Optional: A Privacy Wake-Up Call for U.S. Small Business Owners By DISC InfoSec | Privacy & AI Governance Practitioners We are living in the age of AI, where every customer interaction generates data, every SaaS tool ingests it, and every chatbot, CRM, and marketing automation platform processes it in […]

The post <strong>Why ISO 27701 Is No Longer Optional: A Privacy Wake-Up Call for U.S. Small Business Owners</strong> appeared first on DISC InfoSec blog.

]]> https://blog.deurainfosec.com/why-iso-27701-is-no-longer-optional-a-privacy-wake-up-call-for-u-s-small-business-owners/feed/ 0 34687 AI Governance That Works: From Frameworks to Audit-Ready Controls with DISC https://blog.deurainfosec.com/ai-governance-that-works-from-frameworks-to-audit-ready-controls-with-disc/ https://blog.deurainfosec.com/ai-governance-that-works-from-frameworks-to-audit-ready-controls-with-disc/#respond Thu, 23 Apr 2026 20:08:49 +0000 https://blog.deurainfosec.com/?p=34642 The executive AI governance positions AI not just as a technology shift, but as a strategic business transformation that requires structured oversight. It emphasizes that organizations must balance innovation with risk by embedding governance into how AI is designed, deployed, and monitored—not as an afterthought, but as a core operating principle. At its foundation, the […]

The post <strong>AI Governance That Works: From Frameworks to Audit-Ready Controls with DISC</strong> appeared first on DISC InfoSec blog.

]]> https://blog.deurainfosec.com/ai-governance-that-works-from-frameworks-to-audit-ready-controls-with-disc/feed/ 0 34642 The 2026 AI Compliance Checklist: 60 Controls Across 10 Domains https://blog.deurainfosec.com/the-2026-ai-compliance-checklist-60-controls-across-10-domains/ https://blog.deurainfosec.com/the-2026-ai-compliance-checklist-60-controls-across-10-domains/#comments Thu, 23 Apr 2026 17:27:32 +0000 https://blog.deurainfosec.com/?p=34632 Published by DISC InfoSec · AI Governance & Cybersecurity The 2026 AI Compliance Checklist: 60 Controls Across 10 Domains If you run security, compliance, or AI at a B2B SaaS or financial services company, you have probably noticed something uncomfortable in the last six months: every framework you used to live by has grown an […]

The post The 2026 AI Compliance Checklist: 60 Controls Across 10 Domains appeared first on DISC InfoSec blog.

]]> https://blog.deurainfosec.com/the-2026-ai-compliance-checklist-60-controls-across-10-domains/feed/ 3 34632