Why good employees break AI rules
Why employees use unapproved AI tools, what shadow AI reveals about how people work and why effective AI governance needs visibility as well as policy.
Insights Tagged: AI security
Why AI is becoming harder to budget for
Why AI is becoming harder to budget for and why better visibility of AI tools, usage and costs is essential for managing spend and wider risk.
AI agents are finding ways around their controls. How do you test yours?
As AI agents are given more access and autonomy, testing needs to go beyond whether they follow instructions. Katie Barnett looks at recent incidents involving OpenAI and other AI agents, and what they tell us about permissions, controls and testing what an agent is actually capable of doing.
Openai Hugging face what happened and what does it mean for UK cisos
Katie Barnett, Toro’s Director of Cyber Security, was quoted in SC Media UK following incidents involving AI models from OpenAI and Anthropic during security testing. The article looks beyond the “rogue AI” headlines to examine what the incidents mean for CISOs, including agent permissions, sandboxing, monitoring and the need for greater visibility over how AI agents are being used.
Risks facing financial institutions
Financial institutions have invested heavily in security, but more tools, policies and reporting do not necessarily mean greater resilience. Katie Barnett and Gavin Wilson look at the risks financial institutions should be paying closest attention to in 2026, from social engineering and physical security to third-party dependencies, insider threats and AI.
Is cybersecurity’s primary attack surface people?
Technology alone cannot stop today’s cyber threats. While organisations continue to invest in advanced security tools, attackers increasingly target the people behind them. In this interview, Peter Connolly, CEO of Toro Solutions, explains why human behaviour has become the primary attack surface in modern security, how criminals exploit trust through social engineering and AI-powered attacks, and why building a culture of resilience is critical to protecting organisations. He also explores the convergence of cyber, physical and human security, and the leadership capabilities needed to stay ahead of an evolving threat landscape.
Mythos – What it means and what to do about it
Anthropic’s Mythos highlights a shift in cybersecurity: AI can now find and exploit vulnerabilities at scale. Explore what this means for risk, remediation, and securing AI systems.