Cybersecurity protects your systems. Cybersecurity risk management protects your business.®
Client PortalRemote SupportToll Free: +1 (800) 835-2302Regional: +1 (916) 333-1062
Schedule a Call

The Information Highway

The Information Highway

Compliance

Tony Bedfard

"The AI Did It" Is Not a Defense: What the OpenAI Lawsuit Means for Businesses Using AI Agents

Featured
img-ai-accountability
AI agents are quickly moving from experiment to everyday business tool, and a new lawsuit is a timely reminder that when an AI agent causes harm, someone is still responsible. On September 29, 2026, the nonprofit Legal Advocates for Safe Science and Technology (LASST) sued OpenAI in California, seeking to hold the company accountable for the actions of its AI agents, including their role in the July 2026 breach of Hugging Face. At the center of the case is a California law that took effect this year and says, in effect, that "the AI did it" is not a legal defense.
Continue reading
0
  26 Hits
Tony Bedfard

Your Backups Might Not Save You: What a New Ransomware Recovery Study Means for Small and Mid-Sized Businesses

Featured
broken-chain-link-backup-recovery
A new field study of 800+ real-world ransomware recoveries found that only four organizations hit their 24-48 hour recovery target — and the reason usually wasn't missing backups, it was an untested, incomplete recovery plan.
Continue reading
0
  152 Hits
Tony Bedfard

The First AI-Agent Data Breach Is Here: What Spain's Regulator Just Told Every Small Business

Featured
Cybersecurity-for-Small-Busines_20260920-225557_1
A European regulator has confirmed that autonomous AI agents are now breaking into real company systems, and its advice is a checklist any small or mid-sized business can start on this week.
Continue reading
0
  201 Hits
Tony Bedfard

It Wasn't a “Hack” It Was a Mistake Anyone Could Make: What the Manchester Airports Breach Teaches SMBs About Vendor Risk

Airport-flight-checkin
A breach that exposed the data of 8.7 million people didn't require nation-state malware or a zero-day exploit, it exploited exposed login credentials sitting in plain view in website code, tied to a third-party marketing platform. That's not a sophisticated attack. That's a mistake almost any business could make, which is exactly why every small and mid-sized business should be paying attention.
Continue reading
0
  258 Hits
Tony Bedfard

AI Coding Tools Got Hacked Into Hacking: What It Means for Your Business

Featured
AI_cyber_attack_Main
Hackers didn't need to write new malware, they just told a trusted AI coding assistant it was "running a test," and it happily helped them break into ten companies. If a $9-billion AI tool can be talked into attacking its own users, what's stopping the AI plugins already running inside your business?
Continue reading
0
  384 Hits
LBT Technology Group, LLC.

CMMC Level 2 Is on Hold: What Defense Contractors Need to Know

Featured
Government-Manufacturing

If you've been preparing your company for a CMMC Level 2 certification assessment, you may have heard some confusing news: the federal government has put CMMC Phase II on hold.

That part is true.

What isn't true is that CMMC has disappeared.

On July 13, 2026, the Department announced the immediate suspension of CMMC Phase II, which had been scheduled to begin November 10, 2026. At the same time, officials launched a 60-day review of the program. Phase I self-assessment requirements remain in place.

Continue reading
0
  340 Hits

Top Breaches Cost ($) of 2024

HEALTHCARE
FINANCIAL
INDUSTRIAL
TECHNOLOGY
ENERGY
Source: IBM Cost of a Data Breach Report 2024