Employees are pasting sensitive data into AI tools nobody approved. Here’s what shadow AI costs family offices and SMBs, and how to fix it without a ban.
AI for Family Offices: How to Build a Cyber-Safe Adoption Strategy Recently, Farr Shepherd and I had the opportunity to present at the Family Wealth Report Family Office Cybersecurity Forum in New York. The conversations around AI were some of the most practical discussions I’ve heard on the topic because they didn’t all focus on the familiar gloom and doom around AI. No one in the room was debating whether AI would become
What the SEC’s Amended Reg S-P Means for Financial Advisers — and the Families Who Trust ThemA few months ago, a boutique RIA principal we spoke with pulled up their firm’s cybersecurity incident response plan on a shared drive. It was dated 2019, written for the way the company operated back then, and had never really been tested. This firm
Manufacturing Cybersecurity in 2026: Compliance, OT Security, and What Actually Matters You know how to build, ship, and deliver. In 2026, manufacturers are being asked to do something else as well: demonstrate that their operations are secure. Between federal initiatives to bolster domestic manufacturing and DoD efforts to reduce foreign reliance in supply chains, domestic manufacturing has moved back into focus over the past few years. Federal
Top Cybersecurity Threats Facing Small Businesses in 2026 I was scrolling recently and saw that Grubhub recently confirmed a breach in early 2026, with hackers downloading data from certain systems. Grubhub said customer financial details and order history weren’t affected. Still, it’s hard not to notice how frequently these incidents are showing up. Seeing big companies deal with incidents like this can make a small business owner think, “We’re not famous, so we’re
Why SMS MFA No Longer Cuts It in 2026If you’re still using text messages for login security, it’s time to reconsider. In late 2024 and into 2025, both the FBI and the Cybersecurity and Infrastructure Security Agency issued guidance urging organizations and users to stop relying on SMS-based MFA because it’s vulnerable to interception and phishing. Security vendors and enterprises also started phasing out SMS in favor of