Daily Tech Digest: 2025

Daily Tech Digest - October 31, 2025

Quote for the day:

“The more you loose yourself in something bigger than yourself, the more energy you will have.” -- Norman Vincent Peale

Breaking the humanoid robot delusion

The robot is called . The company says NEO is the world’s first consumer-ready humanoid robot for the home. It is designed to automate routine chores and offer personal help so you can spend time on other things. ... Full autonomy in perceiving, planning, and manipulating like a human is a massive technology challenge. Robots have to be meticulously and painstakingly trained on every single movement, learn to recognize every object, and “understand” — for lack of a better word — how things move, how easily they break, what goes where, and what constitute appropriate actions. One major way humanoid robots are trained is with . A person wearing special equipment remotely controls prototype robots, training them for many hours on how to, say, fold a shirt. Many hours more are required to train the robot how to fold a smaller child’s shirt. Every variable, from the height of the folding table to the flexibility of the fabrics has to be trained separately. ... The temptation to use impressive videos of remotely controlled robots where you can’t see the person controlling them to raise investment money, inspire stock purchases and outright sell robot products, appears to be too strong to resist. Realistically, the technology for a home robot that operates autonomously the way the NEO appears to do in the videos in arbitrary homes under real-world conditions is many years in the future, possibly decades.

Your vendor’s AI is your risk: 4 clauses that could save you from hidden liability

The frontier of exposure now extends to your partners’ and vendors’ use. The main question being: Are they embedding AI into their operations in ways you don’t see until something goes wrong? ... Require vendors to formally disclose where and how AI is used in their delivery of services. That includes the obvious tools and embedded functions in productivity suites, automated analytics and third-party plug-ins. ... Include explicit language that your data may not be used to train external models, incorporated into vendor offerings or shared with other clients. Require that all data handling comply with the strictest applicable privacy laws and specify that these obligations survive the termination of the contract. ... Human oversight ensures that automated outputs are interpreted in context, reviewed for bias and corrected when the system goes astray. Without it, organizations risk over-relying on AI’s efficiency while overlooking its blind spots. Regulatory frameworks are moving in the same direction: for example, high-risk AI systems must have documented human oversight mechanisms under the . ... Negotiate liability provisions that explicitly cover AI-driven issues, including discriminatory outputs, regulatory violations and errors in financial or operational recommendations. Avoid generic indemnity language. Instead, AI-specific liability should be made its own section in the contract, with remedies that scale to the potential impact.

AI chatbots are sliding toward a privacy crisis

The problem reaches beyond internal company systems. Research shows that some of the most used AI platforms collect sensitive user data and share it with third parties. Users have little visibility into how their information is stored or reused, leaving them with limited control over its life cycle. This leads to an important question about what happens to the information people share with chatbots. ... One of the more worrying trends in business is the growing use of , where employees turn to unapproved tools to complete tasks faster. These systems often operate without company supervision, allowing sensitive data to slip into public platforms unnoticed. Most employees admit to sharing information through these tools without approval, even as IT leaders point to data leaks as the biggest risk. While security teams see shadow AI as a serious problem, employees often view it as low risk or a price worth paying for convenience. “We’re seeing an even riskier form of shadow AI,” says Tim Morris, “where departments, unhappy with existing GenAI tools, start building their own solutions using open-source models like .” ... Companies need to do a better job of helping employees understand how to use AI tools safely. This matters most for teams handling sensitive information, whether it’s medical data or intellectual property. Any data leak can cause serious harm, from damaging a company’s reputation to leading to costly fines.

The true cost of a cloud outage

The top 2000 companies in the world pay approximately $400 billion for downtime each year. A simple calculation reveals that these organizations, including the Dutch companies , , , , and , lose around $200 million from their annual accounts due to unplanned downtime. Incidentally, what the Splunk study really revealed were the hidden costs of financial damage caused by problems with security tools, infrastructure, and applications. These can wipe billions off market values. ... A more conservative estimate of downtime costs can be found at Information Technology Intelligence Consulting, which conducted research on behalf of . The majority of the parties surveyed had more than 200 employees, but the combination was more diverse than the top 2000 companies worldwide. The costs of downtime were substantial: at least $300,000 per hour for 90 percent of the companies in question. Forty-one percent stated that IT outages cost between $1 million and $5 million. ... In theory, the largest companies can rely on a . In addition, hyperscalers absorb many local outages by routing traffic to other regions. However, multicloud is not something that you can just set up as a start-up SME. In addition, you usually do not build your applications in a fully redundant form in different clouds. Furthermore, it is quite possible that you can continue to work yourself, but that your product is inaccessible.

5 Reasons Why You’re Not Landing Leadership Roles

Is your posture confident? Do you maintain steady eye contact? Is the cadence, pace and volume of your voice engaging, assertive and compelling? Recruiters assess numerous factors on the . ... Are you showing a grasp of the prospective employer’s pain points and demonstrating an original point of view for how you will approach these problems? Treat senior level interviews like – you are an expert on their business, uncovering potential opportunities with insightful questions, and sharing enough of your expertise that you’re perceived as the solution. ... Title bumps are rare, so you need to give the impression that you are already operating at the in order to be hired as such. Your interview examples should include stories about how you initiated new ideas or processes, as well as measurable results that impact the bottom line. Your examples should specify how many people and dollars you have managed. Ideally, you have stories that show you can get results in up and down markets. ... The hiring process extends over multiple rounds, especially for leadership roles. Keep track of everyone that you have met, as well as what you have specifically discussed with each of them. Send personalized follow-up emails that engage each interviewer uniquely based on what you discussed. This differentiates you as someone who listens and cares about them specifically.

Why understanding your cyber exposure is your first line of defence

Thanks to AI, attacks are faster, more targeted and increasingly sophisticated. As the lines between the physical and digital blur, the threat is no longer isolated to governments or critical national infrastructure. Every organisation is now at risk. Understanding your cyber exposure is the key to staying ahead. This isn’t just a buzzword either; it’s about knowing where you stand and what’s at risk. Knowing every asset, every connection, every potential weakness across your digital ecosystem is now the first step in building a defence that can keep pace with modern threats. But before you can manage your exposure, you need to understand what’s driving it – and why the modern attack surface is so difficult to defend. ... By consolidating data from across the environment and layering it with contextual intelligence, cyber exposure management allows security teams to move beyond passive monitoring. It’s not just about seeing more, it’s about knowing what matters and acting on it. That means identifying risks earlier, prioritising them more effectively and taking action before they escalate. ... Effective and modern cybersecurity is shifting to shaping the battlefield before threats even arrive. That’s down to the value of understanding your cyber exposure. After all, it’s not just about knowing what’s in your environment, it’s about knowing how it all fits together – what’s exposed, what’s critical and where the next threat is likely to emerge.

Applications and the afterlife: how businesses can manage software end of life

Both enterprise software and personal applications have a lifecycle, set by the vendor’s support and maintenance. Once an application or operating system goes out of support, it will continue to run. But there will be no further feature updates and vitally, often no security patches. ... When software end of life is unexpected, it can cause serious disruption to business processes. In the very worst-case scenarios, enterprises will only know there is a problem when a key application no longer functions, or if a malicious actor exploits a vulnerability. The problem for CIOs and CISOs is keeping track of the end of life dates for applications across their entire stack, and understanding and mapping dependencies between applications. This applies equally to in-house applications, off the shelf software and open source. “End of life software is not necessarily bad,” says Matt Middleton-Leal, general manager for EMEA at Qualys. “It’s just not updated any more, and that can lead to vulnerabilities. According to our research, nearly half of the issues on the CISA Known Exploited Vulnerabilities (KEV) list are found in outdated and unsupported software.” As CISA points out, attackers are most likely to exploit older vulnerabilities, and to target unpatched systems. Risks come from old, and known vulnerabilities, which IT teams should have patched.

Tips for CISOs switching between industries

Building a transferable skill set is essential for those looking to switch industries. For Dell’s first-ever CISO, Tim Youngblood, adaptability was never a luxury but a requirement. His early years as a consultant at gave him a front-row seat to the challenges of multiple industries before he ever moved into cybersecurity. Those early years also taught Youngblood that while every industry has its own nuances, the core security principles remain constant. ... Making the jump into a new industry isn’t about matching past job titles but about proving you can create impact in a new context. DiFranco says the key is to demonstrate relevance early. “When I pitch a candidate, I explain what they did, how they did it, and what their impact was to their organization in their specific industry,” he says. “If what they did and how they did it, and what their impact was on the organization resonates where that company wants to go, they’re a lot more likely to say, ‘I don’t really care where this person comes from because they did exactly what I want done in this organization’. ... The biggest career risk for many CISOs isn’t burnout or data breach, it’s being seen as a one-industry operator. Ashworth’s advice is to focus on demonstrating transferable skills. “It’s a matter of getting whatever job you’re applying for, to realise that those principles are the same, no matter what industry you’re in. Whether it’s aerospace, healthcare, or finance, the principles are the same. Show that, and you’ll avoid being pigeonholed.”

Awareness Is the New Armor: Why Humans Matter Most in Cyber Defense

People remain the most unpredictable yet powerful variable in cybersecurity. Lapses like permission misconfiguration, accidental credential exposure, or careless data sharing continue to cause most incidents. Yet when equipped with the right tools and timely information, individuals can become the strongest line of defense. The challenge often stems from behavior rather than intent. Employees frequently bypass security controls or use unapproved tools in pursuit of productivity, unintentionally creating invisible vulnerabilities that go unnoticed within traditional defences. Addressing this requires more than restrictive policies. Security must be built into everyday workflows so that safe practices become second nature. ... Since technology alone cannot secure an organization, a culture of security-first thinking is essential. Leaders must embed security into everyday workflows, promote upskilling, and focus on reinforcement rather than punishment. This creates a workforce that takes ownership of cybersecurity, checking email sources, verifying requests, and maintaining vigilance in every interaction. is both a reminder and a rallying cry. India’s digital economy presents immense opportunity, but its threat surface expands just as fast.

Creepy AI Crawlers Are Turning the Internet into a Haunted House

The degradation of the internet and market displacement caused by commercial AI crawlers directly undermines people’s ability to access information online. This happens in various ways. First, the put significant technical strain on the internet, making it more difficult and expensive to access for human users, as their activity increases the time needed to access websites. Second, the trained on this scraped content now provide answers directly to user queries, reducing the need to visit the original sources and cutting off the traffic that once sustained content creators, including media outlets. ... AI crawlers represent a fundamentally different economic and technical proposition––a vampiric relationship rather than a symbiotic one. They harvest content, news articles, blog posts, and open-source code without providing the semi-reciprocal benefits that made traditional crawling sustainable. Little traffic flows back to sources, especially when search engines like Google start to provide AI generated summaries rather than sending traffic on to the websites their summaries are based on. ... What makes this worse is that these actors aren’t requesting books to read individual stories or conduct genuine research, they’re extracting the entire collection to feed massive language model systems. The library’s resources are being drained not to serve readers, but to build commercial AI products that will never send anyone back to the library itself.

Daily Tech Digest - October 30, 2025

Quote for the day:

"Leadership is like beauty; it's hard to define, but you know it when you see it." -- Warren Bennis

Why CIOs need to master the art of adaptation

Adaptability sounds simple in theory, but when and how CIOs should walk away from tested tools and procedures is another matter. ... “If those criteria are clear, then saying no to a vendor or not yet to a CEO is measurable and people can see the reasoning, rather than it feeling arbitrary,” says Dimitri Osler ... Not every piece of wisdom about adaptability deserves to be followed. Mantras like fail fast sound inspiring but can lead CIOs astray. The risk is spreading teams too thin, chasing fads, and losing sight of real priorities. “The most overrated advice is this idea you immediately have to adopt everything new or risk being left behind,” says Osler. “In practice, reckless adoption just creates technical and cultural debt that slows you down later.” Another piece of advice he’d challenge is the idea of constant reorganization. “Change for the sake of change doesn’t make teams more adaptive,” he says. “It destabilizes them.” Real adaptability comes from anchored adjustments, where every shift is tied to a purpose, otherwise, you’re just creating motion without progress, Osler adds. ... A powerful way to build adaptability is to create a culture of constant learning, in which employees at all levels are expected to grow. This can be achieved by seeing change as an opportunity, not a disruption. Structures like flatter hierarchies can also play a role because they can enable fast decision-making and give people the confidence to respond to shifting circumstances, Madanchian adds.

Building Responsible Agentic AI Architecture

The architecture of agentic AI with guardrails defines how intelligent systems progress from understanding intent to taking action—all while being continuously monitored for compliance, contextual accuracy, and ethical safety. At its core, this architecture is not just about enabling autonomy but about establishing structured accountability. Each layer builds upon the previous one to ensure that the AI system functions within defined operational, ethical, and regulatory boundaries. ... Implementing agentic guardrails requires a combination of technical, architectural, and governance components that work together to ensure AI systems operate safely and reliably. These components span across multiple layers — from data ingestion and prompt handling to reasoning validation and continuous monitoring — forming a cohesive control infrastructure for responsible AI behavior. ... The deployment of AI guardrails spans nearly every major industry where automation, decision-making, and compliance intersect. Guardrails act as the architectural assurance layer that ensures AI systems operate safely, ethically, and within regulatory and operational constraints. ... While agentic AI holds extraordinary potential, recent failures across industries underscore the need for comprehensive governance frameworks, robust integration strategies, and explicit success criteria.

Decoding Black Box AI: The Global Push for Explainability and Transparency

The relationship between regulatory requirements and standards development highlights the connection between legal, technical, and institutional domains. Regulations like the AI Act can guide standardization, while standards help put regulatory principles into practice across different regions. Yet, on a global level, we mostly see recognition of the importance of explainability and encouragement of standards, rather than detailed or universally adopted rules. To bridge this gap, further research and global coordination are needed to harmonize emerging standards with regulatory frameworks, ultimately ensuring that explainability is effectively addressed as AI technologies proliferate across borders. ... However, in practice, several of these strategies tend to equate explainability primarily with technical transparency. They often frame solutions in terms of making AI systems’ inner workings more accessible to technical experts, rather than addressing broader societal or ethical dimensions. ... Transparency initiatives are increasingly recognized in fostering stakeholder trust and promoting the adoption of AI technologies, especially when clear regulatory directives on AI explainability are not developed yet. By providing stakeholders with visibility into the underlying algorithms and data usage, these initiatives demystify AI systems and serve as foundational elements for building credibility and accountability within organizations.

How neighbors could spy on smart homes

Even with strong wireless encryption, privacy in connected homes may be thinner than expected. A new study from Leipzig University shows that someone in an adjacent apartment could learn personal details about a household without breaking any encryption. ... the analysis focused on what leaks through side channels, the parts of communication that remain visible even when payloads are protected. Every wireless packet exposes timing, size, and signal strength. By watching these details over time, the researcher could map out daily routines. ... Given the black box nature of this passive monitoring, even if the CSI was accurate, you would have no ground truth to ‘decode’ the readings to assign them to human behavior. So technically it would be advantageous, but you would have a hard time in classifying this data.” Once these patterns were established, a passive observer could tell when someone was awake, working, cooking, or relaxing. Activity peaks from a smart speaker or streaming box pointed to media consumption, while long quiet periods matched sleeping hours. None of this required access to the home’s WiFi network. ... The findings show that privacy exposure in smart homes goes beyond traditional hacking. Even with WPA2 or WPA3 encryption, network traffic leaks enough side information for outsiders to make inferences about occupants. A determined observer could build profiles of daily schedules, detect absences, and learn which devices are in use.

Ransom payment rates drop to historic low as attackers adapt

The economics of ransomware are changing rapidly. Historically, attackers relied on broad access through vulnerabilities and credentials, operating with low overheads. The introduction of the RaaS model allowed for greater scalability, but also brought increased costs associated with access brokers, data storage, and operational logistics. Over time, this has eroded profit margins and fractured trust among affiliates, leading some groups to abandon ransomware in favour of data-theft-only operations. Recent industry upheaval, including the collapse of prominent RaaS brands in 2024, has further destabilised the market. ... In Q3 2025, both the average ransom payment (USD $376,941) and median payment (USD $140,000) dropped sharply by 66% and 65% respectively compared with the previous quarter. Payment rates also fell to a historic low of 23% across incidents involving encryption, data exfiltration, and other forms of extortion, underlining the challenges faced by ransomware groups in securing financial rewards. This trend reflects two predominant factors: Large enterprises are increasingly refusing to pay ransoms, and attacks on smaller organisations, which are more likely to pay, generally result in lower sums. The drop in payment rates is even more pronounced in data exfiltration-only incidents, with just 19% resulting in a payout in Q3, down to another record low.

Shadow AI’s Role in Data Breaches

The adoption barrier is nearly zero: no procurement process, no integration meetings, no IT tickets. All it takes is curiosity and an internet connection. Employees see immediate productivity gains, faster answers, better drafts, cleaner code, and the risks feel abstract. Even when policies prohibit certain AI tools, enforcement is tricky. Blocking sites might prevent direct access, but it won’t stop someone from using their phone or personal laptop. The reality is that AI tools are designed for frictionless use, and that very frictionlessness is what makes them so hard to contain. ... For regulated industries, the compliance fallout can be severe. Healthcare providers risk HIPAA violations if patient information is exposed. Financial institutions face penalties for breaking data residency laws. In competitive sectors, leaked product designs or proprietary algorithms can hand rivals an unearned advantage. The reputational hit can be just as damaging, and once customers or partners lose confidence in your data handling, restoring trust becomes a long-term uphill climb. Unlike a breach caused by a known vulnerability, the root cause in shadow AI incidents is often harder to patch because it stems from behavior, not just infrastructure. ... The first instinct might be to ban unapproved AI outright. That approach rarely works long-term. Employees will either find workarounds or disengage from productivity gains entirely, fostering frustration and eroding trust in leadership.

Deepfake Attacks Are Happening. Here’s How Firms Should Respond

The quality of deepfake technology is increasing “at a dramatic rate,” agrees Will Richmond-Coggan, partner and head of cyber disputes at Freeths LLP. “The result is that there can be less confidence that real-time audio deepfakes, or even video, will be detectable through artefacts and errors as it has been in the past.” Adding to the risk, many people share images and audio recordings of themselves via social media, while some host vlogs or podcasts. ... As the technology develops, Tigges predicts fake Zoom meetings will become more compelling and interactive. “Interviews with prospective employees and third-party vendors may be malicious, and conventional employees will find themselves battling state sponsored threat actors more regularly in pursuit of their daily remit.” ... User scepticism is critical, agrees Tigges. He recommends "out of band authentication.” “If someone asks to make an IT-related change, ask that person in another communication method. If you're in a Zoom meeting, shoot them a Slack message.” To avoid being caught out by deepfakes, it is also important that employees are willing to challenge authority, says Richmond-Coggan. “Even in an emergency it will be better for someone in leadership to be challenged and made to verify their identity, than the organisation being brought down because someone blindly followed instructions that didn’t make sense to them, or which they were too afraid to challenge.”

Obsidian: SaaS Vendors Must Adopt Security Standards as Threats Grow

The problem is the SaaS vendors tend to set their own rules, he wrote, so security settings and permissions can differ from app to app – hampering risk management – posture management is hobbled by limited-security APIs that restrict visibility into their configurations, and poor logs and data telemetry make threats difficult to detect, investigate, and respond to. “For years, SaaS security has been a one-way street,” Tran wrote. “SaaS vendors cite the shared responsibility model, while customers struggle to secure hundreds of unique applications, each with limited, inconsistent security controls and blind spots.” ... Obsidian’s Tran pointed to the recent breaches of hundreds of Salesforce customers due to OAuth tokens associated with a third party, Salesloft and its Drift AI chat agent, being compromised, allowing the threat actors access into both Salesforce and Google Workspace instances. The incidents illustrated the need for strong security in SaaS environments. “The same cascading risks apply to misconfigured AI agents,” Tran wrote. “We’ve witnessed one agent download over 16 million files while every other user and app combined accounted for just one million. AI agents not only move unprecedented amounts of data, they are often overprivileged. Our data shows 90% of AI agents are over-permissioned in SaaS.” ... Given the rising threats, “SaaS customers are sounding the alarm and demanding greater visibility, guardrails and accountability from vendors to curb these risks,” he wrote.

Why your Technology Spend isn’t Delivering the Productivity you Expected

Firms essentially spend years building technical debt faster than they can pay it down. Even after modernisation projects, they can’t bring themselves to decommission old systems. So they end up running both. This is the vicious cycle. You keep spending to maintain what you have, building more debt, paying what amounts to a complexity tax in time and money. This problem compounds in asset management because most firms are running fragmented systems for different asset classes, with siloed data environments and no comprehensive platform. Integrating anything becomes a nightmare. ... Here’s where it gets interesting, and where most firms stop short. Virtualisation gives you access to data wherever it lives. That’s the foundation. But the real power comes when you layer on a modern investment management platform that maintains bi-temporal records (which track both when something happened and when it was recorded) as well as full audit trails. Now you can query data as it existed at any point in time. Understand exactly how positions and valuations evolved. ... The best data strategy is often the simplest one: connect, don’t copy, govern, then operationalise. This may sound almost too straightforward given the complexity most firms are dealing with. But that’s precisely the point. We’ve overcomplicated data architecture to the point where 80 per cent of our budget goes to maintenance instead of innovation.

Beyond FUD: The Economist's Guide to Defending Your Cybersecurity Budget

Budget conversations often drift toward "Fear, Uncertainty, and Doubt." The language signals urgency without demonstrating scale, which weakens credibility with financially minded executives. Risk programs earn trust when they quantify likelihood and impact using recognized methods for risk assessment and communication. ... Applied to cybersecurity, VaR frames exposure as a distribution of financial outcomes rather than a binary event. A CISO can estimate loss for data disclosure, ransomware downtime, or intellectual-property theft and present a 95% confidence loss figure over a quarterly or annual horizon, aligning the presentation with established financial risk practice. NIST's guidance supports this structure by emphasizing scenario definition, likelihood modeling, and impact estimation that feed enterprise risk records and executive reporting. The result is a definitive change from alarm to analysis. A board hears an exposure stated as a probability-weighted magnitude with a clear confidence level and time frame. The number becomes a defensible metric that fits governance, insurance negotiations, and budget trade-offs governed by enterprise risk appetite. ... ELA quantifies the dollar value of risk reduction attributable to a control. The calculation values avoided losses against calibrated probabilities, producing a defensible benefit line item that aligns with financial reporting.

Daily Tech Digest - October 29, 2025

Quote for the day:

“If you don’t have a competitive advantage, don’t compete.” -- Jack Welch

Intuit learned to build AI agents for finance the hard way: Trust lost in buckets, earned back in spoonfuls

Intuit's technical strategy centers on a fundamental design decision. For financial queries and business intelligence, the system queries actual data, rather than generating responses through large language models (LLMs). Also critically important: That data isn't all in one place. Intuit's technical implementation allows to ingest data from multiple distinct sources: native Intuit data, -connected third-party systems like for payments and user-uploaded files such as spreadsheets containing vendor pricing lists or marketing campaign data. This creates a unified data layer that AI agents can query reliably. ... Beyond the technical architecture, Intuit has made a core user experience across its AI agents. This goes beyond simply providing correct answers: It means showing users the reasoning behind automated decisions. When Intuit's accounting agent categorizes a transaction, it doesn't just display the result; it shows the reasoning. This isn't marketing copy about , it's actual UI displaying data points and logic. ... In domains where accuracy is critical, consider whether you need content generation or data query translation. Intuit's decision to treat AI as an orchestration and natural language interface layer dramatically reduces hallucination risk and avoids using AI as a generative system.

Step aside, SOC. It’s time to ROC

The typical SOC playbook is designed to contain or remediate issues after the fact by applying a patch or restoring a backup, but they don’t anticipate or prevent the next hit. That structure leaves executives without the proper context or language they need to make financially sound decisions about their risk exposure. ... At its core, the Resilience Risk Operations Center (ROC) is a proactive intelligence hub. Think of it as a fusion center in which cyber, business and financial risk come together to form one clear picture. While the idea of a ROC isn’t entirely new — versions of it have existed across government and private sectors — the latest iterations emphasize collaboration between technical and financial teams to anticipate, rather than react to, threats. ... Of course, building the ROC wasn’t all smooth sailing. Just like military adversaries, cyber criminals are constantly evolving and improving. Scarier yet, just a single keystroke by a criminal actor can set off a chain reaction of significant disruptions. That makes trying to anticipate their next move feel like playing chess against an opponent who is changing the rules mid-game. There was also the challenge of breaking down the existing silos between cyber, risk and financial teams. ... The ROC concept represents the first real step in that journey towards . It’s not as a single product or platform, but as a strategic shift toward integrated, financially informed cyber defense.

Data Migration in Software Modernization: Balancing Automation and Developers’ Expertise

The process of is often far more labor-intensive than expected. We've only described a few basic features, and even implementing this little set requires splitting a single legacy table into three normalized tables. In real-world scenarios, the number of such transformations is often significantly higher. Additionally, consider the volume of data handled by applications that have been on the market for decades. Migrating such data structures is a major task. The amount of custom logic a developer must implement to ensure data integrity and correct representation can be substantial. ... Automated data migration tools can help developers migrate to a different database management system or to a new version of the DBMS in use, applying the required data manipulations to ensure accurate representation. Also, they can copy the id, email, and nickname fields with little trouble. Possibly, there will be no issues with replicating the old users table into a staging environment. Automated data migration tools can’t successfully perform the tasks required for the use case we described earlier. For instance, infer gender from names (e.g., determine "Sarah" is female, "John" is male), or populate the interests table dynamically from user-provided values. Also, there could be issues with deduplicating shared interests across users (e.g., don’t insert "kitchen gadgets" twice) or creating the correct many-to-many relationships in user_interests.

The Quiet Rise of AI’s Real Enablers

“Models need so much more data and in multiple formats,” shared George Westerman, Senior Lecturer and Principal Research Scientist, MIT Sloan School of Management. “Where it used to be making sense of structured data, which was relatively straightforward, now it’s: ‘What do we do with all this unstructured data? How do we tag it? How do we organize it? How do we store it?’ That’s a bigger challenge.” ... As engineers get pulled deeper into AI work, their visibility is rising. So is their influence on critical decisions. The report reveals that data engineers are now helping shape tooling choices, infrastructure plans, and even high-level business strategy. Two-thirds of the leaders say their engineers are involved in selecting vendors and tools. More than half say they help evaluate AI use cases and guide how different business units apply AI models. That represents a shift from execution to influence. These engineers are no longer just implementing someone else’s ideas. They are helping define the roadmap. It also signals something bigger. AI success is not just about algorithms. It is about coordination. ... So the role and visibility of data engineers are clearly changing. But are we seeing real gains in productivity? The report suggests yes. More than 70 percent of tech leaders said AI tools are already making their teams more productive. The workload might be heavier, but it’s also more focused. Engineers are spending less time fixing brittle pipelines and more time shaping long-term infrastructure.

The silent killer of CPG digital transformation: Data & knowledge decay

Data without standards is chaos. R&D might record sugar levels as “Brix,” QA uses “Bx,” and marketing reduces it to “sweetness score.” When departments speak different data languages, integration becomes impossible. ... When each function hoards its own version of the truth, leadership decisions are built on fragments. At one CPG I observed, R&D reported a product as cost-neutral to reformulate, while supply chain flagged a 12% increase. Both were “right” based on their datasets — but the company had no harmonized golden record. ... Senior formulators and engineers often retire or are poached, taking decades of know-how with them. warns that unmanaged knowledge loss directly threatens innovation capacity and recommends systematic capture methods. I’ve seen this play out: a CPG lost its lead emulsification expert to a competitor. Within six months, their innovation pipeline slowed dramatically, while their competitor accelerated. The knowledge wasn’t just valuable — it was strategic. ... Intuition still drives most big CPG decisions. While human judgment is critical, relying on gut feel alone is dangerous in the age of AI-powered formulation and predictive analytics. ... Define enterprise-wide data standards: Create master schemas for formulations, processes and claims. Mandate structured inputs. Henkel’s success demonstrates that without shared standards, even the best tools underperform.

From Chef to CISO: An Empathy-First Approach to Cybersecurity Leadership

Rather than focusing solely on technical credentials or a formal cybersecurity education, prioritizes curiosity and hunger for learning as the most critical qualities in potential hires. His approach emphasizes empathy as a cornerstone of security culture, encouraging his team to view security incidents not as failures to be punished, but as opportunities to coach and educate colleagues. ... We're very technically savvy and it's you have a weak moment or you get distracted because you're a busy person. Just coming at it and approaching it with a very thoughtful culture-oriented response is very important for me. Probably the top characteristic of my team. I'm super fortunate. And that I have people from ages, from end to end, backgrounds from end to end that are all part of the team. But one of those core principles that they all follow with is empathy and trying to grow culture because culture scales. ... anyone who's looking at adopting new technologies in the cybersecurity world is firstly understand that the attackers have access to just about everything that you have. So, they're going to come fast and they're going to come hard at you and its they can make a lot more mistakes than you have. So, you have to focus and ensure that you're getting right every day what they can have the opportunity to get wrong.

It takes an AWS outage to prioritize diversification

, caused by a data center malfunction in Northern Virginia, didn’t just disrupt its direct customers; it served as a stark reminder of how deeply our digital world relies on a select few cloud giants. A single system hiccup in one region reverberated worldwide, stopping critical services for millions of users. ... The AWS outage is part of a broader pattern of instability common to centralized systems. ... The AWS outage has reignited a longstanding argument for organizational diversification in the cloud sector. Diversification enhances resilience. It decentralizes an enterprise’s exposure to risks, ensuring that a single provider’s outage doesn’t completely paralyze operations. However, taking this step will require initiative—and courage—from IT leaders who’ve grown comfortable with the reliability and scale offered by dominant providers. This effort toward diversification isn’t just about using a (although a combined approach with multiple is an important aspect). Companies should also consider alternative platforms and solutions that add unique value to their IT portfolios. Sovereign clouds, specialized services from companies like , managed service providers, and offer viable options. Here’s why they’re worth exploring. ... The biggest challenge might be psychological rather than technical. Many companies have internalized the idea that the hyperscalers are the only real options for cloud infrastructure.

What brain privacy will look like in the age of neurotech

What has just introduced, what has now made native as part of its accessibility protocols, is to enable picking up your intentions through neural signals and sensors that AI decodes to allow you to navigate through all of that technology. So I think the first generation of most of these devices will be optional. That is, you can get the smart watch without the neural band, you can get the airpods without the in them. But just like you can't get an Apple watch now without getting an Apple watch with a heart rate sensor, second and third generation of these devices, I think your only option will be to get the devices that have the neural sensors in them. ... There's a couple of ways to think about hacking. One is getting access to what you're thinking and another one is changing what you're thinking. One of the now classic examples in the field is how researchers were able to, when somebody was using a neural headset to play a video game, embed prompts that the conscious mind wouldn't see to be able to figure out what the person's PIN code and address were for their bank account and mailing address. In much the same way that a person's mind could be probed for how they respond to Communist messaging, a person's mind could be probed to see recognition of a four digit code or some combination of numbers and letters to be able to try to get to a person's password without them even realizing that's what's happening.

Beyond Alerts and Algorithms: Redefining Cyber Resilience in the Age of AI-Driven Threats

In an average enterprise Security Operations Center (SOC), analysts face tens of thousands of alerts daily. Even the most advanced platforms struggle with false positives, forcing teams to spend the bulk of their time sifting through noise instead of investigating real threats. The result is a silent crisis: . Skilled analysts burn out, genuine threats slip through, and the mean time to respond (MTTR) increases dangerously. But the real issue isn’t just too many alerts — it’s the lack of context. Most tools operate in isolation. An endpoint alert means little without correlation to user behavior, network traffic, or threat intelligence. Without this contextual layer, detection lacks depth and intent remains invisible. ... Resilience, however, isn’t achieved once — it’s engineered continuously. Techniques like Continuous Automated Red Teaming (CART) and Breach & Attack Simulation (BAS) allow enterprises to test, validate, and evolve their defenses in real time. AI won’t replace human judgment — it enhances it. The SOC of the future will be machine-accelerated yet human-guided, capable of adapting dynamically to evolving threats. ... Today’s are more than security leaders — they’re business enablers. They sit at the intersection of risk, technology, and trust. Boards now expect them not just to protect data, but to safeguard reputation and ensure continuity.

Quantum Circuits brings dual-rail qubits to Nvidia’s CUDA-Q development platform

Quantum Circuits’ means that it combines two different quantum computing approaches — superconducting resonators with . The qubit itself is a photon, and there’s a superconducting circuit that controls the photon. “It matches the reliability benchmarks of ions and neutral atoms with the speed of the superconducting platform,” says Petrenko. There’s another bit of quantum magic built into the platform, he says — error awareness. “No other quantum computer tells you in real time if it encounters an error, but ours does,” he says. That means that there’s potential to correct errors before scaling up, rather than scaling up first and then trying to do error correction later. In the near-term, the high reliability and built-in error correction makes it an extremely powerful tool for developing new algorithms, says Petrenko. “You can start kind of opening up a new door and tackling new problems. We’ve leveraged that already for showing new things for machine learning.” It’s a different approach to what other quantum computer makers are taking, confirms . According to Sanders, this dual-rail method combines the best of both types of qubits, lengthening coherence time, plus integrating error correction. Right now, Seeker is only available via Quantum Circuits’ own cloud platform and only has eight qubits.

Daily Tech Digest - October 28, 2025

Quote for the day:

"Ideas are easy, implementation is hard." -- Guy Kawasaki

India’s AI Paradox: Why We Need Cloud Sovereignty Before Model Sovereignty

As is clear, cloud sovereignty is the new pillar supporting national security and having control over infrastructure, data, and digital operations. It has the capacity to safeguard the country’s national interests, including (but not limited to) industrial data, citizen information, and AI workloads. For India, specifically, building a sovereign digital infrastructure guarantees continuity and trust. It gives the country power to enforce its own data laws, manage computing resources for homegrown AI systems, and stay insulated from the tremors of foreign policy decisions or transnational outages. It’s the digital equivalent of producing energy at home—self-reliant, secure, and governed by national priorities. ... Sovereign infrastructure is less a matter of where data sits and more about who controls it and how securely it is managed. With connected systems, AI workloads spread across networks. This makes it imperative for security to be built into every layer and stage. As systems grow more connected and AI workloads spread across networks, security needs to be built into every layer of technology, not added as an afterthought. That’s where edge computing and modern cloud-security frameworks come in. ... There is a real cost involved in neglecting cloud sovereignty. If our AI models continue to depend upon infrastructure that lies outside our jurisdiction, any changes in foreign regulations might suddenly restrict access to critical training datasets.

Do CISOs need to rethink service provider risk?

Security leaders face mounting pressure from boards to provide assurance about third-party risks, while services provider vetting processes are becoming more onerous — a growing burden for both CISOs and their providers. At the same time, AI is becoming integrated into more business systems and processes, opening new risks. CISOs may be forced to rethink their vetting processes with partners to maintain a focus on risk reduction while treating partnerships as a shared responsibility. ... When looking to engage a services provider, his vetting process starts with building relationships first and then working towards a formal partnership and delivery of services. He believes dialogue helps establish trust and transparency and underpin the partnership approach. “A lot of that is ironed out in that really undocumented process. You build up those relationships first, and then the transactional piece comes after that.” ... “If your questions stop once the form is complete, you’ve missed the chance to understand how a partner really thinks about security,” Thiele says. “You learn a lot more from how they explain their risk decisions than from a yes/no tick box.” Transparency and collaboration are at the heart of stronger partnerships. “You can’t outsource accountability, but you can become mature in how you manage shared responsibility,” Thiele says. ... With AI, Cruz has started to monitor vendors acquiring ISO 42001 certification for AI governance. “It’s a trend I’m seeing in some of the work that we’re doing,” she says.

The Silent Technical Debt: Why Manual Remediation Is Costing You More Than You Think

A far more challenging and costly form of this debt has silently embedded itself into the daily operations of nearly every software development team, and most leaders don’t even have a line item for it. This liability is remediation debt: The ever-growing cost of manually fixing vulnerabilities in the open source components that form the backbone of modern applications. For years, we’ve accepted this process as a necessary chore. A scanner finds a flaw, an alert is sent, and a developer is pulled from their work to hunt down a patch. ... The complexity doesn’t stop there. The report reveals that 65% of manual remediation attempts for a single critical vulnerability require updating at least five additional “transitive” dependencies, or a dependency of a dependency. This is the dreaded “dependency conundrum” that developers lament, where fixing one problem creates a cascade of new compatibility issues. ... It’s time to reframe our way of dealing with this: the goal is not just to find vulnerabilities faster but to remediate them instantly. The path forward lies in shifting from manual labor to intelligent remediation. This means evolving beyond tools that simply populate dashboards with problems and embracing platforms that solve them at their source. Imagine a system where a vulnerability is identified, and instead of creating a ticket, the platform automatically builds, tests, and delivers a fully patched and compatible version of the necessary component directly to the developer.

AI Isn’t Coming for Data Jobs – It’s Coming for Data Chaos

Data chaos arises when organizations lose control of their information landscape. It’s the confusion born from fragmentation, duplication, and inconsistency when multiple versions of “truth” compete for authority. Poor data quality and disconnected data governance processes often amplify this chaos. This chaos manifests as conflicting reports, inaccurate dashboards, mismatched customer profiles, and entire departments working from isolated datasets that refuse to align. ... Recent industry analyses reveal an accelerating imbalance in the data economy. While nearly 90% of the world’s data has been generated in just the past two years, data professionals and data stewards represent only about 3% of the enterprise workforce, creating a widening gap between information growth and the human capacity to govern it. ... Data chaos doesn’t just strain systems, it strains people. As enterprises struggle to keep pace with growing data volume and complexity, the very professionals tasked with managing it find themselves overwhelmed by maintenance work. ... When applied strategically, AI can transform the data management lifecycle from ingestion to governance reducing human toil and freeing engineers to focus on design, quality, and strategy. Paired with an intelligent data catalog, these systems make information assets instantly discoverable and reusable across business domains. AI-driven data classification tools now tag, cluster, and prioritize assets automatically, reducing manual oversight.

Why IT projects still fail

Failure today means an IT project doesn’t deliver expected benefits, according to CIOs, project leaders, researchers, and IT consultants. Failure can also mean a project doesn’t produce returns, runs so late as to be obsolete when completed, or doesn’t engage users who then shun it in response. ... IT leaders and now business leaders, too, get enamored with technologies, despite years of admonishments not to do so. The result is a misalignment between the project objectives and business goals, experienced CIOs and veteran project managers say. ... Stettler says a business owner with clear accountability is needed to ensure that business resources are available when required as well as to ensure process changes and worker adoption happen. He notes that having CIOs — instead of a business owner — try to make those things happen “would be a tail-wagging-the-dog scenario.” ... “Executives need to make more time and engage across all levels of the program. They can’t just let the leaders come talk to them. They need to do spot checks and quality reviews of deliverable updates, and check in with those throughout the program,” Stettler says. “And they have to have the attitude of ‘Bring stuff to me when I can be helpful.’” ... Phillips acknowledges that project teams don’t usually overlook entire divisions, but they sometimes fail to identify and include all the stakeholders they should in the project process. Consequently, they miss key requirements to include, regulations to consider, and opportunities to capitalize on.

The Human Plus AI Quotient: Inside Ascendion's strategy to make AI an amplifier of human talent

Technical skills evolve—mainframes lasted forty years, client-server about twenty, and digital waves even less. Skills will come and go, so we focus on candidates with a strong willingness to learn and invest in themselves. That’s foundational. What’s changed now is the importance of being open to AI. We don’t require deep AI expertise at the outset, but we do look for those who are ready to embrace it. This approach explains why our workforce is so quick to adapt to AI—it’s ingrained in how we hire and develop our people. ... The war for talent has always existed—it’s just the scale and timing that change. For us, the quality of work and the opportunities we provide are key to retention. Being fundamentally an AI-first company is a big differentiator, and our “AI-first” mindset is wired into our DNA. Our employees see a real difference in how we approach projects, always asking how AI can add value. We’ve created an environment that encourages experimentation and learning, and the IP our teams develop—sometimes even around best practices for AI adoption—becomes part of our organisational knowledge base. ... The good news is that for a large cross-section of the workforce, "skilling in AI" is not about mastery of mathematics; it's about improving English writing skills to prompt effectively. We often share prompt libraries with clients because the ability to ask the right question and interpret the output is a significant win.

Recruitment Class: What CIOs Want in Potential New Hires

Candidates should be comfortable operating in a very complex, deep digital ecosystem, Avetisyan said. Now, digital fluency means much more than knowing how to use a certain tool that is currently popular, including AI tools. There needs to be an awareness of the broader implications and responsibilities that come with implementing AI. "It's about integrating AI responsibly and designing for accessibility," Avetisyan said -- both of which represent big challenges that must be tackled and kept continuously top of mind. AI should elevate user experiences. ... There's still a need to demonstrate technical skills with human skills such as problem-solving, communication, and ethical awareness, she said. "You can't just be an exceptional coder and right away be effective in our organization if you don't understand all these other aspects," she said. One more thing: While vibe coding -- letting AI shoulder much or most of the work -- is a buzzy concept, she said she is not ready to turn her shop of developers into vibe coders. A more grounded approach to teaching AI fluency is -- or should be -- the educational mission. ... As for programming? A programmer is still a programmer, but the job has evolved to become more strategic, Ruch said. Technical talent will be needed; however, the first few revisions of code will be pre-written based on the specifications given to AI, he said.

Do programming certifications still matter?

“Certifications are shifting from a checkbox to a compass. They’re less about proving you memorized syntax and more about proving you can architect systems, instruct AI coding assistants, and solve problems end-to-end,” says Faizel Khan, lead AI engineer at Landing Point, an executive search and recruiting firm. ... Certifications really do two things, Khan adds. “First, they force you to learn by doing,” he says. “If you’re taking AWS Solutions Architect or Terraform, you don’t pass by guessing—you plan, build, and test systems. That practice matters. Second, they act as a public signal. Think of it like a micro-degree. You’re not just saying, ‘I know cloud.’ You’re showing you’ve crossed a bar that thousands of other engineers recognize.” But there are cons, too. “In tech, employers don’t just want credentials, they want proof you can deliver,” says Kevin Miller, CTO at IFS. “Programming certifications can be a valuable indicator of your baseline knowledge and competencies, especially if you’re early in your career or pivoting into tech, but their importance is dwindling.” ... “I’m more interested in a candidate’s attitude and aptitude: what problems they’ve solved, what they’ve built, and how they’ve approached challenges,” Watts says. “Certifications can show commitment and discipline, and they’re especially useful in highly specialized roles. But I’m cautious when someone presents a laundry list of certifications with little evidence of real-world application.”

Guarding the Digital God: The Race to Secure Artificial Intelligence

Securing an AI is fundamentally different from securing a traditional computer network. A hacker doesn’t need to breach a firewall if they can manipulate the AI’s “mind” itself. The attack vectors are subtle, insidious, and entirely new. ... The debate over whether people or AI should lead this effort presents a false choice. The only viable path forward is a deep, symbiotic partnership. We must build a system where the AI is the frontline soldier and the human is the strategic commander. The guardian AI should handle the real-time, high-volume defense: scanning trillions of data points, flagging suspicious queries, and patching low-level vulnerabilities at machine speed. The human experts, in turn, must set the strategy. They define the ethical red lines, design the security architecture, and, most importantly, act as the ultimate authority for critical decisions. If the guardian AI detects a major, system-level attack, it shouldn’t act unilaterally; it should quarantine the threat and alert a human operator who makes the final call. ... The power of artificial intelligence is growing at an exponential rate, but our strategies for securing it are lagging dangerously behind. The threats are no longer theoretical. The solution is not a choice between humans and AI, but a fusion of human strategic oversight and AI-powered real-time defense. For a nation like the United States, developing a comprehensive national strategy to secure its AI infrastructure is not optional.

Managing legacy medical devices that can no longer be patched

First, hospitals need to recognize that it is rarely possible to instantaneously remove a medical device, but what you can do is build a wall around that device so that only trusted, validated network traffic will be able to reach the device. Secondly, close collaboration with vendors is critical to understand available upgrade paths. Most vendors don’t want customers running legacy technologies that heighten security risk. From my perspective, if a device is too old to be secured, that’s a serious concern. Collaborate with your providers early and be transparent about budget and timeline constraints. This enables vendors to design a phased roadmap for replacing legacy systems, steadily reducing security risk over time. ... We can take a cue from manufacturing, where cyber resilience is essential to limiting the impact of attacks on the production line and broader ecosystem. No single breach should be able to bring down the entire operation. Yet many organizations still run forgotten, outdated systems. It’s critical to retire legacy assets, streamline the environment, and continuously identify and manage risk. ... We’ve seen meaningful progress when dozens of technology vendors pledged to self-regulate and build cyber resilience into their products from the outset. Unfortunately, that momentum has slowed. In my experience, however, the strongest gains often come from non‑legislative, industry‑led initiatives, when organizations voluntarily choose to prioritize security.

Daily Tech Digest - October 27, 2025

Quote for the day:

“There is no failure except in no longer trying.” -- Chris Bradford

AWS Outage Is Just the Latest Internet Glitch Banks Must Insulate Against

If clouds fail or succumb to , the damage can be enormous, measured only by the maliciousness and creativity of the hacker and the redundancy and resilience of the defenses that users have in place. ... As I describe in , we are already way down the rabbit hole of . It would take a massive coordinated global effort to secure the current internet. That is unlikely to happen. Therefore, the most realistic business strategy is to assume the inevitable: A glitch, human error or a successful breach or cloud failure will occur. That means systems must be in place to distribute patches, resume operations, reconstruct networks, and recover lost data. Redundancy is a necessary component to get back online, but how much redundancy is feasible or economically sustainable? And will those backstops actually work? ... Given these ever-increasing challenges and cyber incursions in the financial services business, I have argued for a fundamental change in regulation — one that will keep regulators on the cutting edge of digital and . To accomplish that, regulation should be a more collaborative experience that invests the financial industry in its own oversight and systemic security. This effort should include industry executives and their staffs. Their expertise in the oversight process would enrich the quality of regulation, particularly from the perspective of strengthening the cyber defenses of the industry.

The 10 biggest issues CISOs and cyber teams face today

“It’s not finger-pointing; we’re all learning,” Lee says. “Business is now expected to embrace and move quickly with AI. Boards and C-level executives are saying, ‘We have to lean into this more’ and then they turn to security teams to support AI. But security doesn’t fully understand the risk. No one has this down because it’s moving so fast.” As a result, many organizations skip security hardening in their rush to embrace AI. But CISOs are catching up. ... Moreover, Todd Moore, global vice president of data security at , says CISOs are facing a torrent of AI-generated data — generally unstructured data such as chat logs — that needs to be secured. “In some aspects, AI is becoming the new insider threat in organizations,” he says. “The reason why I say it’s a new insider threat is because there’s a lot of information that’s being put in places you never expected. CISOs need to identify and find that data and be able to see if that data is critical and then be able to protect it.” ... “We’re now getting to the stage where no one is off-limits,” says Simon Backwell, head of information security at tech company and a member of ’s Emerging Trends Working Group. “Attack groups are getting bolder, and they don’t care about the consequences. They want to cause mass destruction.”

The AI Inflection Point Isn’t in the Cloud, It’s at the Edge

Beyond the screen, there is a need for agentic applications that specifically reduce latency and improve throughput. “You need an agentic architecture with several things going on,” Shelby said about using models to analyze the packaging of , for instance. “You might need to analyze the defects. Then you might need an with a RAG behind it to do manual lookup. That’s very complex. It might need a lot of data behind it. It might need to be very large. You might need 100 billion parameters.” The analysis, he noted, may require integration with a backend system to perform another task, necessitating collaboration among several agents. AI appliances are then necessary to manage multiagent workflows and larger models. ... The nature of LLMs, Shelby said, requires a person to tell you if the LLM’s output is correct, which in turn impacts how to judge the relevancy of LLMs in edge environments. It’s not like you can rely on an LLM to provide an answer to a prompt. Consider a camera in the , focusing on an oil pump, Shelby said. “The LLM is like, ‘Oh, there are some campers cooking some food,’ when really there’s a fire” at the oil pump. So, how do you make the process testable in a way that engineers expect, Shelby asked. It requires end-to-end guard rails. And that’s why random, cloud-based LLMs do not yet apply to industrial environments.

Scaling Identity Security in Cloud Environments

One significant challenge organizations face is the disconnect between security and research and development (R&D) teams. This gap can lead to vulnerabilities being overlooked during the development phase, resulting in potential security risks once new systems are operational in cloud environments. To bridge this gap, a collaborative approach involving both teams is essential. Creating a secure cloud environment necessitates an understanding of the specific needs and challenges faced by each department. ... The journey to achieving scalable identity security in cloud environments is ongoing and requires constant vigilance. By integrating management into their cybersecurity strategies, organizations can reduce risks, increase efficiencies, and ensure compliance with regulatory requirements. With security continue to evolve, staying informed and adaptable remains key. To gain further insights into cybersecurity, you might want to read about some cybersecurity predictions for 2025 and how they may influence your strategies surrounding . The integration of effective NHI and secrets management into cloud security controls is not just recommended but necessary for safeguarding data. It’s an invaluable part of a broader cybersecurity strategy aimed at minimizing risk and ensuring seamless, secure operations across all sectors.

Owning the Fallout: Inside Blameless Culture

For an organization to truly own the fallout after an incident, there must be a cultural shift from blame to inquiry. A ‘blameless culture’ doesn’t mean it’s a free-for-all, with no accountability. Instead, it’s a circumstance where the first question after an incident isn’t “Who screwed up?” it’s “What failed — and why?” As Gustavo Razzetti describes, “blame is a sign of an unhealthy culture,” and the goal is to replace it with curiosity. In a blameless postmortem, you break down what happened, map the contributing systemic factors, and focus on where processes, tooling, or assumptions broke down. This mindset aligns with the concept of just culture, which balances accountability and systems thinking. After an incident, the focus is to ask how things went wrong, not whom to punish — unless egregious misconduct is involved. ... The most powerful learning happens in the moment when incident patterns redirect strategic priorities. For example, during post-mortems, a team could discover that under-monitored dependencies cause high-severity incidents. With a resilience mindset, that insight can become an objective: “Build automated dependency-health dashboards by Q2.” When feedback and insights flow into , teams internalize resilience as part of delivery, not an afterthought. Resilient teams move beyond damage control to institutional learning.

Can your earbuds recognize you? Researchers are working on it

Each person’s ear canal produces a distinct acoustic signature, so the researchers behind designed a method that allows earbuds to identify their wearer by using sound. The earbuds emit acoustic signals into the user’s ear canal, and the reflections from that sound reveal patterns shaped by the ear’s structure. What makes this study stand out is that the authentication process happens entirely on the earbuds themselves. The device extracts a unique binary key based on the user’s ear canal shape and then verifies that key on the paired mobile device. By working with binary keys instead of raw biometric data, the system avoids sending sensitive information over . This helps prevent interception or replay attacks that could expose biometric data. ... A key part of the research is showing that earbuds can handle biometric processing without large hardware or cloud support. EarID runs on a small microcontroller comparable to those found in commercial earbuds. The researchers measured performance on an with an 80 MHz chip and found that it could perform the key extraction in under a third of a second. For comparison, traditional machine learning classifiers took three to ninety times longer to train and process data. This difference could make a real impact if ear canal authentication ever reaches consumer devices, since users expect quick and seamless authentication.

What It 'Techs' to Run Real-Time Payments at Scale

Beyond hosting applications, the architecture is designed for scale, reuse and rapid provisioning. APIs and services support multiple verticals including lending, insurance, investments and even quick commerce through a shared infrastructure-as-a-service model. "Every vertical uses the same underlying infra, and we constantly evaluate whether something can be commoditized for the group and then scaled centrally. It's easier to build and scale one accounting stack than reinvent it every time," Nigam said. Early investments in real-time compute systems and edge analytics enable rapid anomaly detection and insights, cutting operational downtime by 30% and improving response times to under 50 milliseconds. A recent on financial infrastructure in emerging economies underscores the importance of edge computation and near-real-time monitoring for high-volume payments networks - a model increasingly being adopted by global fintech leaders to ensure both speed and reliability. ... Handling spikes and unexpected surges is another critical consideration. India's payments ecosystem experiences predictable peaks - including festival seasons or weekends - and unpredictable surges triggered by government announcements or regulatory deadlines. When a payments platform is built for population scale, any single merchant or use case does not create a surge at this level.

Who’s right — the AI zoomers or doomers?

Earlier this week, the editorial board published an opinion column claiming that without regulation, AI will soon outpace humanity’s ability to control it. The post said AI’s uncontrolled evolution threatens human autonomy, free expression, and democracy, stressing that the technical development is faster than what lawmakers can handle. ... Both zoomers and doomers agree that humanity’s fate will be decided when the industry releases AGI or superintelligent AI. But there’s strong disagreement on when that will happen. From ’s Sam Altman to Elon Musk, Eric Schmidt, Demis Hassabis, Dario Amodei, Masayoshi Son, Jensen Huang, Ray Kurzweil, Louis Rosenberg, Geoffrey Hinton, Mark Zuckerberg, Ajeya Cotra, and Jürgen Schmidhuber — all predict AGI by later this year to later this decade. ... Some say we need strict global rules, maybe like those for nuclear weapons. Others say strong laws would slow progress, stop new ideas, and give the benefits of AI to China. ... AI is already causing harms. It contributes to privacy invasion, disinformation and deepfakes, surveillance overreach, job displacement, cybersecurity threats, child and psychological harms, environmental damage, erosion of human creativity and autonomy, economic and political instability, manipulation and loss of trust in media, unjust criminal justice outcomes, and other problems.

Powering Data in the Age of AI: Part 3 – Inside the AI Data Center Rebuild

You can’t design around AI the way data centers used to handle general compute. The loads are heavier, the heat is higher, and the pace is relentless. You start with racks that pull more power than entire server rooms did a decade ago, and everything around them has to adapt. New builds now work from the inside out. Engineers start with workload profiles, then shape airflow, cooling paths, cable runs, and even structural supports based on what those clusters will actually demand. In some cases, different types of jobs get their own electrical zones. That means separate cooling loops, shorter throw cabling, dedicated switchgear — multiple systems, all working under the same roof. Power delivery is changing, too. In a conversation with , David Beach, Market Segment Manager at , explained, “Equipment is taking advantage of much higher voltages and simultaneously increasing current to achieve the rack densities that are necessary. This is also necessitating the development of components and infrastructure to properly carry that power.” ... We know that hardware alone doesn’t move the needle anymore. The real advantage comes from pushing it online quickly, without getting bogged down by power, permits, and other obstacles. That’s where the cracks are beginning to open.

Strategic Domain-Driven Design: The Forgotten Foundation of Great Software

The strategic aspect of is often overlooked because many people do not recognize its importance. This is a significant mistake when applying DDD. Strategic design provides context for the model, establishes clear boundaries, and fosters a shared understanding between business and technology. Without this foundation, developers may focus on modeling data rather than behavior, create isolated microservices that do not represent the domain accurately, or implement design patterns without a clear purpose. ... The first step in strategic modeling is to define your domain, which refers to the scope of knowledge and activities that your software intends to address. Next, we apply the age-old strategy of "divide and conquer," a principle used by the Romans that remains relevant in modern software development. We break down the larger domain into smaller, focused areas known as subdomains. ... Once the language is aligned, the next step is to define bounded contexts. These are explicit boundaries that indicate where a particular model and language apply. Each bounded context encapsulates a subset of the ubiquitous language and establishes clear borders around meaning and responsibilities. Although the term is often used in discussions about microservices, it actually predates that movement.

Pages