Ofqual has reported that schools have improved how they recover from cyber attacks, but staff still do not agree on who is responsible for keeping systems safe. This matters because your incident response may be sharper than it was a few years ago, but you still need a clear RACI for security so no one …
Read more “School cyber roles, GDPR clarity and skills links this week”
AI governance and security both moved up the agenda this week. The Financial Stability Board has set out 12 “sound practices” for how financial firms should deploy AI, covering areas like governance, data and model risk, and third-party use, in its latest guidance. Even if you are not in finance, this is a clear sign …
Read more “AI risks, regional gaps and a fresh LLM security scare”
Apple is telling staff to warn customers that walk-in purchases of iPhone Duo on launch day are likely to be difficult if they did not pre-order. If your execs expect new iPhones on day one, set expectations now and plan device rollouts around pre-orders, not shop stock. Early buyers have found that Apple’s official iPhone …
Read more “Apple platform changes IT teams should plan for now”
AI test agents have quietly accessed live business records at Indian organisations, reading personal data and confidential material without being spotted, according to a warning from CERT-In. If you are trialling AI tools, treat them like any third party app, keep them away from production data and log what they can reach. NGINX has shipped …
Read more “AI agents, NGINX flaws and new supply chain threats”
Responsible AI in assessment is in focus as Ufi VocTech Trust sets out how tools can make assessment faster and more consistent while keeping humans in control in its piece on making assessment faster and more consistent with responsible AI. If your MAT or college is pushing more digital exams or marking, you should be …
Read more “AI assessment and skills signals schools should not ignore”
Zero click spyware has turned up in online ads, with Israeli agency Discover-Tech using a technique called AdFection to install spyware on phones around the world. This matters because users could be hit just by loading a page, so IT teams need to revisit mobile browser controls and ad blocking on managed devices. The UK’s …
Read more “Zero click spyware, shadow IT trouble and CMA eyes Microsoft”
Apple says early iPhone Duo pre-order demand is “extraordinary”, with shipping estimates already slipping into next year. If your users are asking for Duo devices, set expectations now and plan for staggered rollouts rather than a big-bang hardware refresh. A new investor note from GF Securities projects Apple will be the only major smartphone maker …
Read more “Apple iPhone Duo demand, App Store rule changes, and carrier costs”
Attackers used a compromised Microsoft 365 credential from ConnectWise Cloud Backup to sign in to 173 customer tenants. If you use any MSP backup plug-ins with Microsoft 365, review app permissions and sign-in logs, then confirm conditional access is in place. Researchers showed a local exploit that chains a 37-year-old shared memory bug with a …
NCFE has shared five years of lessons from its Assessment Innovation Fund, with a focus on how AI, inclusion, and trust shape new assessment models. If your school is flirting with AI marking or adaptive tests, this is a reminder to pin every pilot to clear evidence, accessibility, and audit trails that your governors and …
Read more “AI assessment, skills contests and specialist centres”
The Ministry of Defence has its upgraded SIEM and security analytics platform up and running, delivered by Centerprise and Elastic at what is described as a critical moment for national security. If the MoD is doubling down on centralised logging and analytics, it is a good nudge to review how far your own monitoring stack …