Mimecast

Cybersecurity Awareness Month is here. So is the first click someone wasn't thinking twice about. A forwarded file. A quick share in a group chat. None of it feels like a security decision, but it is one, and your people are making hundreds of them every day. This year's Cybersecurity Awareness Month kit focuses on four moments where those decisions happen most: AI phishing, business email compromise, shadow AI, and collaboration governance. Get your kit today, everything you need to build a security awareness habit that sticks: https://lnkd.in/e3R-hGmp

Somewhere in your organization, AI is making decisions nobody's watching. Eventually, someone will ask you to prove it's governed. In our monthly Threat Intelligence Series, Senior Product Manager Andrew Williams, Senior Sales Engineer Manager Alexander Peters, and Director of Security Operations Zach Godec break down what ISO/IEC 42001 and the NIST AI Risk Management Framework require, and what IT and security teams can realistically stand up without a dedicated GRC function. Tune in on October 8: https://lnkd.in/e28CdA5Z.

We all know AI is changing how we work, but it's also changing how attackers work. 69% of security leaders expect an AI-driven attack within 12 months. Only 40% have a strategy to stop it. That 29-point gap is where the next two years of incidents will happen. Our latest white paper gives you the framework to understand and govern your AI security risk. Download it here: https://lnkd.in/guUV8S-N

Cold email used to mean one person, one message, one inbox. Now it's an autonomous loop that prospects, personalizes, and replies without a human touching a single step. Our Threat Research team dives into how agentic AI is reshaping outreach at scale, hundreds of millions of emails from a single platform in one year alone. Here's what you need to know: https://lnkd.in/gebynA2C

Every AI incident gets investigated the same way: pull the logs, trace the kill chain, find out what the model did. Beth Miller, our Global Field CISO, thinks we're missing the most important part. In her latest Forbes Technology Council piece, she introduces the idea of two timelines behind every AI incident: the one we investigate after something goes wrong, and the human decision, made long before the agent ever acted, that we've never learned to review. Read the full piece: https://lnkd.in/gFEvC44E

A phishing click and a leaked credential put a user at risk in different ways. Google Workspace's phishing and identity signals now feed directly into the Human Risk Command Center, giving security teams a clearer, more accurate view of user risk. In his latest blog, Senior Director - Product Marketing, Giulian Garruba covers how it all connects: https://lnkd.in/gtBEf9nm

41% of organizations are writing AI usage policies. Almost none are enforcing them. Director of Product Marketing, Governance and Compliance Insights, Maureen Holland breaks down the real gap: policy without enforcement isn't governance, it's documentation. Real governance follows the person, with risk scoring and nudges the moment someone's about to cross a line. It's one of six principles in our latest white paper. Find out where your policy stands: https://lnkd.in/guUV8S-N

AI agents are quietly becoming the newest actors touching your most sensitive data, often faster than any security program was built to track them. In his latest blog, Senior Product Marketing Manager, Insider Risk Management & Data Protection, Michael B. breaks down how Mimecast's Agent Risk Center closes that gap: tying every agent's actions back to the person who deployed it, discovering shadow AI use, and enforcing policy through the AI Rulebook. Read the full blog here: https://lnkd.in/g7QGcVSr

A risk scenario lands next week that Sarah Armstrong-Smith, Executive Director at Secure Horizons, has never seen. Before she speaks, you make the same call: where would you focus first? Then find out if your instinct matches hers. Our Global Field CISO, Beth Miller, joins Sarah for the conversation, live, next week. Register today: https://lnkd.in/eEHb-gfZ

Back to school also means back to phishing season, and this year's campaigns are timed around the exact moments universities are busiest. 📚 Our Threat Research team identified three campaigns hitting education institutions right now: credential-harvesting compliance notices, remote-access malware disguised as transcript requests, and student job offers showing signs of money-mule recruitment. Here's what you need to know: https://lnkd.in/gf4ejZEx