Velqory Blog | AI, cybersecurity and regulation

All analyses

1–12 of 267

Current knowledge, organised by topic, date and practical consequence.

Conceptual scene of a technician examining wheat samples with a generic sensor at a quality-control bench. — Quality control as a visual example of a bounded applied-AI task. Generated scene; not an actual finalist or pilot.AI-generated image under Velqory editorial direction.

Lead analysis

Artificial intelligence05 Oct 20264 min read

Applied AI in Europe: buy a pilot, not a promise

European finalists offer a starting point for finding solutions. An SME needs a different dossier to decide: its own tasks, permitted data and outcomes someone can accept.

Read analysis

Conceptual scene of an opened network device, disconnected cable and power adapter in a box, with a clock in the background. — Product triage and evidence preservation under time pressure. Generated scene; not a real incident.AI-generated image under Velqory editorial direction.

Regulation05 Oct 20264 min read

CRA in October: turn 24- and 72-hour reporting into an operation

Manufacturer reporting already applies. The task now is to connect triage, owners and submission evidence without waiting for a perfect investigation.

Read analysis

Conceptual scene of a person verifying an invoice by telephone, with a closed laptop on the desk. — Independent-channel verification before paying. Generated scene; not an actual fraud or identified person.AI-generated image under Velqory editorial direction.

Cybersecurity05 Oct 20264 min read

Phishing at work: an October response plan

Awareness becomes protection when the team can pause a payment, report a message and recover an account safely.

Read analysis

Conceptual scene of hands with a calculator and accepted cards beside rejected drafts in a transparent tray. — Accepted outcomes and rejected attempts have different costs. Generated scene; no actual accounts or vendor prices.AI-generated image under Velqory editorial direction.

Governance05 Oct 20264 min read

AI costs: who accepts the outcome and who pays for the attempts?

October's decision is not about choosing the lowest price per call. It is about assigning each workload an owner and calculating the cost of delivering an outcome the operation accepts.

Read analysis

Conceptual scene of a technician holding a backup drive beside two generic servers, one with a disconnected connection. — Isolated evaluation and recovery as separate tracks. Generated scene; not a test or migration performed by Velqory.AI-generated image under Velqory editorial direction.

Digital systems05 Oct 20264 min read

PostgreSQL 19 Beta 4: test the future without delaying retirement of 14

Features withdrawn in September require expectations to be revised. End of support for 14 demands a separate production decision.

Read analysis

Person puts an authentication key in a small open safe beside a notebook without text. Generated conceptual scene; not documentation of an actual event, product or test.AI-generated image under Velqory editorial direction.

Artificial intelligence05 Oct 20264 min read

04/10 edition: the system prompt is not a secret vault

Making an instruction harder to extract does not fix a credential placed in context. Remediation starts by removing the secret and proving control outside the model.

Read analysis

Two people work on an exposed circuit board with separate parts and a closed box on a nearby bench. Generated conceptual scene; not documentation of an actual event, product or test.AI-generated image under Velqory editorial direction.

Regulation05 Oct 20265 min read

03/10 edition: an open-source steward is not a manufacturer

The entity maintaining a project's infrastructure and the entity supplying a market product may differ. How can that distinction be preserved without leaving a vulnerability without a recipient?

Read analysis

Person points to a switch between two network units, with a separate external drive in front. Generated conceptual scene; not documentation of an actual event, product or test.AI-generated image under Velqory editorial direction.

Digital systems05 Oct 20264 min read

02/10 edition: PostgreSQL — replication does not decide who writes

Schema, sequences and final reconciliation belong in the handover contract; return changes character once the destination accepts new operations.

Read analysis

Technician adjusts a timer on a transparent key box beside a locked cabinet and a barrier. Generated conceptual scene; not documentation of an actual event, product or test.AI-generated image under Velqory editorial direction.

Governance05 Oct 20264 min read

01/10 edition: an AI exception with expiry and revocation

When a control becomes unavailable, continuity needs a bounded decision. An exception should state what remains prohibited and how it can end before expiry.

Read analysis

Person places a storage drive in a pouch, with two separate laptops and disconnected cables. Generated conceptual scene; not documentation of an actual event, product or test.AI-generated image under Velqory editorial direction.

Cybersecurity05 Oct 20265 min read

30/09 edition: recovering an account does not close its sessions

After an identity incident, what evidence shows earlier access has lost its usefulness and recovery has not reopened the same route?

Read analysis

Person compares two labels with printed shapes and bars beside a parcel and a printer. Generated conceptual scene; not documentation of an actual event, product or test.AI-generated image under Velqory editorial direction.

Artificial intelligence05 Oct 20264 min read

29/09 edition: validate the answer before turning it into action

An AI answer may look like text but end up interpreted as HTML, a query or a file path. Validation belongs at the destination, not in trust in the model.

Read analysis

Technician shows another person a device's rear connection beside a sheet with an illustrated sequence. Generated conceptual scene; not documentation of an actual event, product or test.AI-generated image under Velqory editorial direction.

Regulation05 Oct 20265 min read

28/09 edition: a security advisory must let its recipient act

After receiving an advisory, can a user determine whether they are affected, choose the measure and verify the result without interpreting a sales statement?

Read analysis

How we publish

Each analysis links to the official source and says what changes in practice.

01Sources in view
Every analysis links the official documentation it relies on.
02Operational context
We translate change into decisions, owners and evidence.
03Continuous review
We update the analysis when facts or guidance change.
04Identified imagery
We disclose generated photography and credit documentary photography.

From context to execution

Is there an obligation or a system that needs to become operational?

We map the problem, write the scope and build the solution with acceptance criteria.

Talk to Velqory Explore services