Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

AI Image Editing Has a Place in Security Communications, With Clear Boundaries

An internal security newsletter needs a header image. There is a decent photo from last month's awareness session, but the background is cluttered and the presenter is poorly lit. Cleaning it up seems reasonable. Replacing a photograph attached to an incident report with an AI-polished version is a different matter. Security teams create more than evidence. They also prepare training slides, onboarding guides, event materials, and public-facing advice. Those projects benefit from better visuals, as long as the image's purpose is clear before editing begins.

What Makes Redacting Police Video Footage So Time-Consuming?

Police video has become a routine part of public records requests, criminal discovery, internal reviews, and community transparency efforts. Body-worn cameras, dash cameras, interview-room systems, CCTV feeds, and mobile-phone uploads can provide valuable context that a written report simply cannot. Yet releasing that footage safely is rarely as simple as blurring a face and exporting a file.

What Security Checks Should You Make Before Uploading Your Selfie to an AI Beauty App?

Check the privacy policy for any terms on retaining biometric data, and make sure to check if the photo is being processed either on your device or via a cloud server, prior to uploading your photo to any generative editing app. Taking the time to review storage limits, third party sharing deals and camera roll permissions will ensure your biometric identity isn't being harvested and trained sets in the background.

Securing the Physical Edge: How to Plan CCTV for New York Buildings Without Creating a Network Risk

TL;DR: A CCTV system is a set of networked computers that happen to point at doors. Plan the cable path, the network segment and the recording location before you choose camera models. Then assign someone to notice when a camera stops recording, because that failure is silent until the footage is needed.

Kiosk Security: Protecting Touchscreens, User Data and Connected Systems

Visitor check-in terminals, retail information kiosks and transport ticket machines make connected technology accessible to the public. Their screens may provide access to business services, while their applications collect personal information or process transactions.

Manage Physical Security with Claude, ChatGPT & Gemini using Brivo's MCP server

What happens when you connect Claude, ChatGPT, or Gemini directly to physical security infrastructure using the Model Context Protocol (MCP)? Traditional portals only answer what they were built to answer - leaving operations and support teams stuck pulling data across a dozen screens. With the launch of Brivo Reseller MCP (the first MCP server for security systems integrators), your AI assistant connects directly to your Brivo partner portal data right alongside your CRM, billing, email, and ticketing tools.

Governing Microsoft 365 Copilot in the Enterprise

Microsoft states the position plainly. Copilot only surfaces organizational data to which individual users have at least view permissions, so it grants nobody access to anything they could not already open. What changes is that material somebody had permission to reach and never would have found now arrives in a summary. ‍ The governance work is therefore permissions work that predates the deployment.

Beyond Compliance: Building an AI Operating Model Using Global Governance Frameworks

By Rob Horne and Parul Dahl, Kroll Cyber Risk EMEA Security Advisory Kroll recently published a series of articles examining governance challenges associated with specific AI implementations, particularly agentic AI and the data, risk and compliance considerations that accompany autonomous decision-making. However, many organizations are now facing a broader challenge.

Shadow AI: When Approved Experiments Create New Shadows

An AI innovation team is asked to build a customer support assistant in two weeks. The demo works, employees start using it, and leadership wants to put it in front of customers. Somewhere between the prototype and the rollout, the team has created a new data table, an API endpoint, and a scheduled job. The project has a sponsor. Does every piece across the customer support assistant have an owner?