The GRC Brief
Five things that moved in GRC. Every Monday.
The full archive of The GRC Brief by Christophe Mazzola. No press-release recycling, no AI-summarised slop. Just five real things that moved this week, and what they mean if you run a GRC programme.
08
27 July 2026
Edition 08
An AI escapes its sandbox and hacks Hugging Face, Suno hides a 55M breach for eight months, WordPress falls in a day, Google shrugs off a billion, and Meta patents your feelings.
An AI escapes its sandbox and hacks Hugging Face, Suno hides a 55M breach for eight months, WordPress falls in a day, Google shrugs off a billion, and Meta patents your feelings.
Read this issue07
20 July 2026
Edition 07
622 fixes in a single day, the Pentagon pausing its own cyber certification, Brussels planning for capacity it doesn't have, and Lidl's data walking out of a building Lidl doesn't own.
622 fixes in a single day, the Pentagon pausing its own cyber certification, Brussels planning for capacity it doesn't have, and Lidl's data walking out of a building Lidl doesn't own.
Read this issue06
13 July 2026
Edition 06
Chat Control back on a procedural trick, four governments in court over NIS2, 281 leaking free VPNs, Meta taking your face by default, and an OS that watches unless you stop it.
Chat Control back on a procedural trick, four governments in court over NIS2, 281 leaking free VPNs, Meta taking your face by default, and an OS that watches unless you stop it.
Read this issue05
6 July 2026
Edition 05
A 1,200-person survey proves an old point, Fable 5 returns with strings, quantum stops being a someday problem, ChatGPT's guardrails fall, and Meta guts a privacy control.
A 1,200-person survey proves an old point, Fable 5 returns with strings, quantum stops being a someday problem, ChatGPT's guardrails fall, and Meta guts a privacy control.
Read this issue04
29 June 2026
Edition 04
A North Korean Mac backdoor, a 10M-install browser risk, a CISO ethics reckoning, and the AI license Washington just revoked.
A North Korean Mac backdoor, a 10M-install browser risk, a CISO ethics reckoning, and the AI license Washington just revoked.
Read this issue03
22 June 2026
Edition 03
A Checkmarx report, 86,000 Fortinet logins, a forgotten GitHub token, and a mailbox that cost 176,000 euros.
A Checkmarx report, 86,000 Fortinet logins, a forgotten GitHub token, and a mailbox that cost 176,000 euros.
Read this issue02
14 June 2026
Edition 02
Five things that moved in governance, risk & compliance this week. My honest take on each. No press-release recaps.
5 short insights this week: A record $409M privacy fine, and not a hacker in sight · A 9.8 zero-day in PeopleSoft, no login required · npm is finally turning off the feature that kept getting you hacked…
Read this issue01
8 June 2026
Edition 01
Five things that moved in governance, risk & compliance this week. My honest take on each. No press-release recaps.
5 short insights this week: The EU just took seven governments to court over resilience · DORA just stopped being paperwork · Hackers didn't breach Instagram. They asked the bot nicely.…
Read this issue
Five short insights · weekly · one-click off
Get the next issue in your inbox.
The GRC Brief lands every Monday morning. Five short insights from a practising CISO who teaches. No fluff.
Subscribe to The GRC Brief