Security thinking, grounded in practice

AI-written email, cloned voices, and deepfake video calls are raising the stakes of executive phishing. This article looks at what the 2026 data shows about the threat, what a successful attack costs, and the measures leadership teams can put in place to reduce their exposure.

A new federal register goes live on October 1, 2026. The filing itself is simple. Proving your ownership records six months later is where most organizations will struggle.

The Digital Operational Resilience Act (DORA) has been in full application since January 17, 2025. In the 15 months since, the first Register of Information submissions have been collected, the first Critical ICT Third-Party Providers (CTPPs) have been designated, and the operational reality of the regulation has started to take shape. For financial entities in scope, the questions in 2026 are no longer about readiness but about execution quality.