If you've worked in cybersecurity for as long as I have, then you'll know there are a couple of things you can count on. First, the threats that are out there never stop evolving. And second, sooner or later, you're going to be in the bullseye.

What makes life so much harder today is that AI and other automated tools have dramatically narrowed the gap between vulnerability discovery and the time it takes to exploit them.

And when this can now be measured in minutes – seconds, even – you know you have a problem. This fundamental change in the way adversaries operate means we no longer have the luxury of time to understand an attack, assess the risk and decide what to do next.

Which means we have to be better prepared and have resiliency for whatever is thrown at us.

Visibility is key

For me, that starts with accepting a simple reality: you cannot defend what you cannot see. And it’s why visibility is one of the most important capabilities an organization can develop.

After all, if you understand what exists within your environment – how those systems interact and what normal looks like – then you're in a much stronger position to identify unusual behavior before it develops into something more serious.

Observability, on the other hand, takes that visibility to the next level. It provides the context security teams need to make informed decisions quickly, especially when time is working against them.

In other words, visibility tells you what is happening, while observability helps you understand why it's happening.

And that’s crucial. Today's organizations operate across on-premises infrastructure, cloud environments, networks, and an increasing number of connected technologies.

As those environments become more distributed, understanding what's happening across them becomes significantly harder.

Without that visibility, it's difficult to understand where your risks are, how systems interact, or where an attacker may be able to exploit a weakness.

Think like a hacker

Which leads me neatly onto my next point. Throughout my career, including my time working in offensive cyber operations in the intelligence community, I've found that the most effective way to understand risk is to think like the adversary.

I start by asking how someone would attack an organization and then work backwards to identify and close gaps.

That’s because attackers don't see organizations in the way that you or I might do. They’re always on the hunt for a toehold in. They look for weaknesses in people, processes and technologies.

They look for the easiest route first to achieve their objective. And then they exploit that weakness.

And it’s an approach I would urge all security leaders to adopt if they want to stay one step ahead.

That means continuously asking where an attacker would start, how they would move through the organization and what controls would slow them down or stop them altogether.

But for this to work, it also requires organizations to design resilience into the way they operate. And that’s something we’ve embedded across our organization.

For instance, we have internal and external teams that conduct continuous product, enterprise, spear-phishing and physical penetration testing.

For us, it's about educating the team across the business to ensure they remain vigilant. But it’s also about inoculating people so that when they see something suspicious online, they have that instinct that something might be wrong and they report it.

We also want to make it easy for people to report events so we can analyze them quickly and better understand the targeting.

Secure by design

We’ve also invested heavily in Secure by Design to ensure that all the products we deliver to customers are as secure as humanly possible. In practice, it means being able to trace every piece of code back to its source and verify its integrity throughout the development process.

It's similar to maintaining a chain of custody for evidence. We want to know exactly where software components come from, how they're verified and how they're protected throughout the entire build process.

More broadly, Secure by Design is increasingly being adopted across our industry as organizations recognize the importance of software integrity, traceability and transparency throughout the development lifecycle.

This is important because, as I said at the beginning, there are two certainties in cybersecurity: threats will continue to evolve, and organizations will continue to be targeted. Businesses across the world must adapt quickly to the grim reality that a cybersecurity incident isn’t a matter of if, but a matter of when. And AI is supercharging the pace at which all this is happening and broadening the blast radius of any attack.

That’s why you need to understand your environment well enough to reduce unnecessary risk, detect malicious activity quickly and limit the blast radius when something does happen. Pair that with a clearly defined and tested plan for recovery and that's what robust cyber resilience looks like in practice.

We've featured the best endpoint protection software.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

Defense is operating in an environment where the pace of change continues to increase. Adversaries are adapting quickly and technology development cycles are becoming shorter. The boundaries between physical and digital operations are also becoming harder to define, while military commanders have more information available to them than ever before.

This changes how operational advantage is achieved. The performance of an individual platform or system remains important, but so does its ability to work effectively within the wider operational environment. Information needs to move securely to where it is needed, supporting decisions and action across different domains.

As new technologies are introduced, integration will become an increasingly important part of defense capability. The challenge is making sure innovation can be put to practical use alongside the systems and infrastructure already supporting operations.

Connecting technology across defence

Conversations around defense innovation often focus on AI, autonomous systems, advanced sensors, cyber capability and space assets. Each has a significant role to play, but none operates in isolation.

Information gathered by one system may need to be shared across multiple domains before it supports an operational decision. Networks, data, command systems and people all contribute to that process. The value of any individual technology is linked to how effectively it connects with the wider operational environment.

This principle also applies to the infrastructure supporting military operations. Communications networks, operational facilities and digital systems all contribute to creating an environment where information can move securely and reliably. As these environments evolve, resilience and security must be designed from the outset though approaches such as secure-by-design and zero-trust principles.

Strengthening the foundations of operational capability

AI has become one of the defining topics in defense. Its ability to process information and support decision-making has significant potential, but those capabilities depend on the quality of the data available and the resilience of the infrastructure that carries it.

Reliable communications, trusted data and secure networks remain fundamental to operational effectiveness. If those foundations are unavailable or compromised, the benefits of advanced technologies are reduced.

Therefore, creating decision advantage is not simply a technology challenge. It is an infrastructure and digital challenge and increasingly, a collaboration challenge.

For organizations supporting critical infrastructure, this has become an increasingly familiar challenge. Communications, operational technology, and digital infrastructure must work together to create environments where reliability cannot be compromised.

Keeping people at the heart of automation

Automation is attracting considerable attention across defense as organizations are looking to improve efficiency and increase operational tempo. However, automation should never be viewed as an end.

Its greatest value often comes from reducing routine activity rather than replacing people. Predictive maintenance, autonomous monitoring, automated network management and logistics optimization all help reduce the time spent on repetitive tasks, allowing highly trained personnel to focus on areas where experience and judgement remain essential.

The most effective technologies do not replace human capability - they amplify it.

The infrastructure supporting multi-domain operations

As operations become increasingly integrated across land, sea, air, cyber and space, infrastructure is taking on greater strategic importance. Communications, transport, energy, and digital systems all contribute to operational capability, showing how infrastructure and technology are becoming increasingly interdependent.

The movement of people, information, energy, and capability all contribute to operational readiness. Reliable infrastructure enables those elements to function as a single system, ensuring capability can be delivered when and where it is needed.

One example can be seen in the Falkland Islands, where runway infrastructure forms part of maintaining long-term strategic capability and readiness. It illustrates how infrastructure and operational capability are becoming increasingly interconnected.

Bringing innovation into operational use

The UK benefits from an established community of innovators, with government, industry, academia, SMEs and the Armed Forces all contributing to the development of new ideas and technologies. The opportunity now is to ensure those innovations can be adopted enough to meet operational needs.

Collaboration is still a critical part of this process. Bringing together different perspectives helps ensure technology is developed with practical application in mind and can be integrated more effectively into future capability.

Delivering the next phase of defense capability

Much of the technology required to support future defense operations already exists. The focus now needs to be on how quickly it can be integrated and put to operational use, giving the Armed Forces the advantage they need as threats and operating environments continue to change. That requires stronger connections across networks, data, platforms, people and infrastructure.

Collaboration between government, industry, academia, SMEs and the Armed Forces will remain central to moving capability from development into deployment. Technologies also need a clearer and faster route beyond demonstrations and pilots, so useful capability reaches operators when it is needed.

The organizations that succeed will be those able to bring people and technology together across the wider defense environment. Doing that securely, reliably and at pace will determine how effectively innovation translates into operational advantage.

We've featured the best AI tool.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

• Meta wants to upgrade ex-managers back to managers
• 7,000 workers were moved into the Applied AI org earlier this year
• Company's CTO admitted previous workforce changes were "atrocious"

Meta has reportedly partially reversed its decision to push for flatter, manager-light teams by asking some employees in its Applied AI business to move from individual contributor roles back into managerial positions.

New Business Insider reporting suggests Meta is asking certain workers to volunteer themselves as managers rather than forcing them into it, but without the company sharing comment on the matter, it's unclear how workers who refuse may be impacted.

As for the business itself, it's a pretty new one that was established this year, with around 7,000 employees shifted under the Applied AI umbrella.

Meta wanted fewer managers, now it wants more

Some of the workers who were previously assigned as managers were reassigned as individual contributors when they joined the Applied AI org, with Business Insider previously reporting how many workers felt they'd effectively been "drafted" into the business, highlighting ongoing friction internally.

The manager-light stance comes from CEO Mark Zuckerberg's 'Year of Efficiency' announcement in 2023, when he argued that a flatter organization could be more nimble and better poised for change.

With the company as a whole now on track to spend over $130 billion this year on AI chips and infrastructure, it's possible that a growing Applied AI organization could be behind the need for more traditional management.

Still, Zuckerberg's efficiency-driven, manager-light program seems to remain in force across other areas of the business, with this push for new managers looking to only be affecting Applied AI.

Separately, CTO Andrew Bosworth previously admitted that Meta's rollout of its new AI division was "atrocious" (via Wired), promising better communication for future changes.

"We shook up the management structure that was providing you stability while rapid changes in strategy, including the boom/bust cycle of hiring, left entire teams in the lurch," he admitted.

AI has rewritten the enterprise data playbook. Workflows no longer just create temporary operational data, but vast amounts of high-value assets, from LLM training datasets and model outputs to logs, metadata and archived knowledge that may need to be preserved for years.

As enterprise tech leaders seek to scale infrastructure to meet these demands, storage requirements are undergoing a fundamental shift. Capacity and performance remain critical, but data security has become equally important. Today, long-term data integrity and absolute cyber resilience carry equal weight.

Protecting this data, however, is no longer just about defeating today’s threat vectors. It requires preparing storage infrastructure for a significant shift: the arrival of quantum computing.

Data is a long-term strategic asset, not a short-lived trend

AI is accelerating data growth, but it can also extend the useful life of information. Data recorded today will be harvested for compliance, advanced analytics and model retraining for years to come.

To manage this economically, enterprise architectures rely heavily on high-capacity HDDs. While flash technologies dominate performance-critical hot tiers, HDDs remain the undisputed backbone of large-scale storage, providing the capacity, economics and longevity needed to archive data at scale.

As a result, organizations must consider how to protect not only today's data, but also its future value. After all, if the underlying infrastructure is compromised down the road, the very assets driving future AI innovations become the biggest operational and regulatory liability.

Harvest now, decrypt later

Current encryption technologies remain effective against conventional threats. However, quantum computing is expected to challenge some of the cryptographic methods used for authentication and key exchange.

This has led to concerns around “harvest now, decrypt later” attacks, where encrypted data is collected today with the expectation that future quantum capabilities could potentially decrypt it later.

For organizations storing sensitive intellectual property, research data or AI training datasets, this means security decisions made today could have implications for years to come.

Preparing for that future requires action from security leaders and IT directors now.

Security must be built into the infrastructure

Security is often viewed through the lens of data encryption, and with good reason. Self-encrypting drives (SEDs) provide always-on, hardware-based AES-256 encryption that helps protect data at rest without impacting performance.

But protecting data alone is no longer enough.

Storage devices themselves must be trusted. Firmware, authentication mechanisms, provisioning processes and diagnostic tools all play a role in ensuring a drive operates securely throughout its lifecycle.

If attackers compromise a device's firmware or trust architecture, broader security controls can be undermined regardless of how data is encrypted elsewhere in the system. This makes storage security a critical component of overall cyber resilience.

Implementing quantum-resistant defenses in storage

To counter these emerging attack vectors, the storage industry is actively embedding post-quantum cryptography into hardware architecture of enterprise hard drives. Rather than focusing solely on protecting data, the objective is to protect the trust architecture that underpins the drive itself.

Post quantum cryptography (PQC) technologies are being incorporated into areas such as secure key establishment, firmware authentication, secure provisioning, and trusted diagnostics. These capabilities are designed in alignment with established NIST post-quantum standards and are implemented using hybrid approaches that combine classical cryptography with quantum-resistant algorithms.

In practical terms, this means that the mechanisms responsible for establishing trust, validating firmware integrity and protecting administrative functions can remain resilient against both conventional and future quantum-enabled attacks. With the operational service life of HDDs often spanning 5 years (or more), implementing PQC today helps protect against quantum-based threats that may not materialize for several years, but that we know are coming.

Importantly, HDDs have long incorporated security controls to defend against today's threats. PQC does not replace these protections; it enhances them by adding an additional layer of resilience against emerging attack vectors.

Trust in the AI era

For many years, storage innovation was primarily defined by increases in capacity. Today, the expectations placed on infrastructure are much broader.

Organizations seek storage platforms that can scale with AI-driven data growth, deliver reliable performance, preserve integrity over long retention periods and withstand an increasingly complex threat environment.

PQC represents an important step in that evolution. By extending protection beyond data encryption and into the trust mechanisms that underpin storage devices themselves, PQC-enabled HDDs help organizations prepare for the security challenges of tomorrow while protecting the data they manage today.

As AI continues to elevate the strategic value of enterprise data, security can no longer be a short-term, reactive consideration. Trust must be engineered directly into the hardware layer and built to outlast the threats of today, tomorrow and the quantum era ahead of us.

We've featured the best SSD.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

• Qobuz wants you to make a memory-filled playlist, and explain it
• You can win an iFi iDSD GR 2 for your efforts
• World Alzheimer's Month runs through September

Alongside 'Fast songs for the gym' and 'Band 101 for introducing a partner to a band on the eve of going to their gig', remembering moments or periods of your life is one of the most important reasons we make playlists. I still listen to "mix-tapes" (in digital format, mostly) I made while living abroad, road tripping around the outback or preparing for big university parties.

Now, streaming service Qobuz has taken time off its war on AI slop to acknowledge the link between music and memory for World Alzheimer's Month, teaming up with hi-fi tech brand iFi Audio to do so.

World Alzheimer's Month runs through September, and during that time, Qobuz and iFi are running a competition to submit a memory-laden playlist, and perhaps win an iFi iDSD GR 2 for your efforts.

Wait, what's the link? Well, it has been shown that musical memory remains well-preserved in Alzheimer's sufferers, and so a song may help with memory recall.

I'm getting this from a study published in the National Library of Medicine, which suggests that music interventions can "delay and decelerate the neurodegeneration in individuals at risk". But my colleague and Audio Editor tells me she has seen music's profound effect on memory recall in a fellow dancer who (even in advanced stages of this progressive disease) could still perform decades-old choreography, if the music were played.

Many non-profits, including Music & Memory or Playlist for Life, exist to help people by providing training, awareness or music-based care, to aid those suffering with various degenerative illnesses.

What about that competition?

Oh yes, the competition.

During September, Qobuz and iFi want you to make a playlist (on the former's hi-res download and streaming platform, of course) full of songs which bring you back to a certain time or important memory.

Then, you need to head over to iFi Audio's competition landing page, which will give you a few steps to complete and fields to fill in.

This page also lets you provide a 'short story' or description of what the playlist means to you. There's no stated word count, but this whole news story could be pasted into the field with without a problem.

Once you've submitted your playlist, you'll be in with a chance to win the iFi iDSD GR 2 DAC (or digital-analog-converter, to level up your music using, say, the USB-C port on your phone, and on to your wired headphones or earbuds), worth $529 / £529 / AU$849. And that's a great prize. We gave the iFi IDSD GR 2 a perfect, 5-star review, praising its sound quality and easy-to-use touch-screen. So good luck!

There's no indication of how the brands will choose a winner; if it'll be based on the description, or tracks, or at random. It's also not clear what will happen to the rest of the playlists; maybe Qobuz will publish some of its favorites for all to see, but perhaps the submission is just for the purposes of the competition. Either way, delving back into old albums and tracks that really take you back to a specific moment will be a cathartic — and sometimes profound — experience. Music's great, isn't it?

• OpenAI for Financial Services comes with built-in premium datasets
• Third-party subscription sharing is also in the works
• GPT-6 promises 100% on the 256-512K Long Context benchmark

OpenAI has lifted the wraps off ChatGPT for Financial Services, its latest industry-specific version of ChatGPT Work designed to give sector professionals access to relevant reasoning and models.

The company warned that analysts regularly spend too much time finding data, checking figures, building models and turning complex analysis into presentation-friendly reports – all things it hopes to be able to tackle with this iteration of ChatGPT Work.

Core to this new product is, of course, GPT-6 Astra, but OpenAI also worked with investment experts from Morgan Stanley and Evercore to guide its development.

ChatGPT for Financial Services

With the launch of ChatGPT for Financial Services, OpenAI has built premium datasets from the likes of Daloopa, PitchBook and LSEG News directly into the tool, so users won't need to negotiate their own external datasets. By hosting and indexing that data itself, OpenAI can ultimately improve performance and latency for end users.

OpenAI also promises to be working with S&P Capital IQ, LSEG, MSCI, Dow Jones Factiva and Moody’s so that users can access their subscription benefits directly through their ChatGPT login to reduce the friction further.

All of this with the benefits of OpenAI's latest frontier model, Astra, which sees marked improvements across the board. The jumps from 91.5% to 100% at 256K-512K and from 73.8% to 96.3% at 512K-1M are especially noteworthy on the Long Context MRCR benchmarks when compared with GPT-5.6 Sol, because finance work often requires handling long documents like annual reports and filings.

The company also advertises a 100% score for the ExploitBench cybersecurity benchmark, which should come as welcome news to this highly-regulated industry.

Only eligible financial institutions will gain access to the tool for now, and they must contact OpenAI for options.

"ChatGPT for Financial Services is one way we serve customers across the industry, but we recognize that it will require a range of solutions to address the needs of the finance industry," the company said in its launch blog post.

"OpenAI has a long history of collaborating with innovators to unlock novel AI solutions. Financial services firms and developers can use our API to build specialized applications for the needs they understand best. OpenAI brings frontier models and the capabilities to put them to work. Financial institutions, data providers, and software partners bring specialized expertise, trusted information, and customer relationships."