Feed aggregator

AI is helping cybercriminals take advantage of tax filers. Here's how to protect your money and personal information.

The Notting Hill actor's bad guy era continues.

A startup called Marine Biologics is breaking down seaweed into its base components so they can be used for a range of consumer applications, from foodstuffs to cosmetics to bioplastics.

Do you experience chest pain when anxiety strikes? Relax; it's more common than you think, and there are ways to address it.

• Naughty Dog studio head Neil Druckmann says "don't be on" a third The Last of Us game
• Druckmann doesn't know if there will be more, adding "This could be it"
• The Last of Us director has previously revealed he had a "concept" for a third game that there could be "one more chapter to this story"

The Last of Us Part 3 might never happen, according to Naughty Dog co-president Neil Druckmann.

Speaking in a recent interview with Variety ahead of the premiere of HBO's The Last of Us Season 2, Druckmann was asked about the possibility of there ever being another installment in the beloved franchise.

"I was waiting for this question," Druckmann said, sighing. "I guess the only thing I would say is don’t bet on there being more of 'Last of Us.' This could be it."

The director's latest statement on the future of The Last of Us contradicts what he's previously said about the potential of there being "one more chapter to this story".

At the end of the Grounded 2: Making of The Last of Us Part 2 documentary, which was released last year, Druckmann spoke on the series finality, saying, "If we never get to do it again, this is a fine ending point. Last bite of the apple, the story's done."

However, he did mention that he has a "concept" that could be "as exciting" as both The Last of Us games.

"I've been just thinking about it, 'is there a concept there?' And for now years, I haven't been able to find that concept," he said at the time.

"But recently, that's changed, and I don't have a story, but I do have that concept that to me is as exciting as 1, as exciting as 2, is its own thing, and yet has this throughline for all three. So it does feel like there's probably one more chapter to this story."

Right now, Naughty Dog is working on Intergalactic: The Heretic Prophet, the first single-player in a new franchise in development for PlayStation 5.

You might also like...

• Best PS5 games 2025 - top PlayStation 5 titles to play right now
• The Last of Us Online 'was great', says former PlayStation boss, but Naughty Dog canceled it because otherwise it wouldn't have been able to make Intergalactic: The Heretic Prophet
• Sony is now issuing PS Plus compensation following the recent PSN outage

With APYs wavering, now's the time to lock in a great rate and protect your earnings.

Looking to switch internet providers in Indiana? Our CNET experts have top recommendations for you.

The perfect mattress for side sleepers supports proper spinal alignment and relieves pressure on the shoulders and hips.

• Assassin's Creed Shadows' global release timings have been revealed
• It's also available to preload now on Xbox Series X|S
• The game will take up roughly 107GB of space on console

Ubisoft has revealed the global release times for Assassin's Creed Shadows and, if you have the game pre-ordered, you're now able to preload it ahead of launch if you're on Xbox Series X|S.

The official Assassin's Creed account on X / Twitter uploaded the upcoming game's global release timings as a handy image, and while it shows that preloading is available now on Xbox consoles, folks on other systems will need to wait a bit. For PS5, it'll be March 18 at midnight (local time), and on PC, players can begin preloading on March 17 at 4pm UTC.

(Image credit: Ubisoft)

In the US, Shadows will be available to play from March 19 at 9pm PDT / March 20 at 12am EDT on Steam. For consoles, it's March 20 at 12am PDT / 12am EDT, meaning folks on the East Coast should be able to play it a little earlier on Xbox and PS5.

For the UK, it's March 20 at 4am GMT on Steam and midnight GMT on consoles. But if you're planning on burning that midnight oil, it'll actually be available via Ubisoft Connect on PC slightly earlier on March 19 at 10pm GMT.

Lastly, if you're preloading Assassin's Creed Shadows today on Xbox Series consoles, make sure you've got a hefty chunk of space reserved either on the system or on one of the best Xbox Series X hard drives and SSDs. That's because it's going to take up around 107.77GB (thanks, Eurogamer). But hey, if your download speeds aren't the best, at least there's plenty of time to get it prepped and ready to go on your console for day one.

We're definitely keen to check out the full game for ourselves this month. TRG's managing editor, Rob Dwiar, recently spent six hours with Assassin's Creed Shadows and came away with very positive impressions.

You might also like...

• Monster Hunter Wilds roadmap - all confirmed DLC so far
• Sid Meier's Civilization 7 update 1.1.0 finally stops AI leaders from flooding your territory with armies of explorers
• Tony Hawk's Pro Skater 3+4 is real and the Digital Deluxe Edition literally turns it into a Doom game

• Google’s AI Overview is now powered by Gemini 2.0
• Google’s new experimental AI Mode offers reasoning and follow-up responses in search
• Unlike traditional search, AI Mode actively synthesizes information from multiple sources

Google is doubling down on bring AI to Search with an expansion to its AI Overviews and new experimental AI Mode. In Google's ideal world, you would basically never leave the search engine and it would handle a lot of that pesky thinking on your behalf. On the other hand, there would be fewer open tabs giving you anxiety.

Overviewing AI

AI Overviews have already become a familiar sight for many users, appearing at the top of search results with neatly summarized answers to big questions. Now, with Gemini 2.0 behind the wheel, Google claims these overviews will be faster, more detailed, and capable of handling trickier queries in areas like coding, advanced math, and multimodal reasoning. In other words, if you were relying on Reddit and Stack Overflow to explain why your Python script keeps throwing an error, Google wants you to ask it instead.

Google claims there are a lot of fans who want to see AI even more embedded in their online searches. That's what led to the creation of AI Mode. Currently in an experimental mode in Labs. AI Mode aims to bring better reasoning and more immediate analysis to your online time. AI Mode won’t just spit out a quick answer to your query. It will actively break down complex topics, compare multiple options, and pull from online sources to provide more nuanced responses. AI Mode should help prevent you from going from a simple search for a new toothpaste to spending 30 minutes on Wikipedia learning about the history of medieval dentistry.

Let’s say you’re trying to figure out the best way to track your eating habits. A regular Google search might give you a mix of ads, product reviews, and a few scientific studies buried somewhere on page two. AI Mode, on the other hand, can analyze the pros and cons of different apps, smart wearables, and AI-enhanced scales in a single response, summarizing the key features and limitations; even pulling in fresh user reviews. If you need more details, you can ask a follow-up question like, “How does eating late at night impact heart rate?” and get an instant, well-researched answer without having to piece it together from five different websites.

AI internet

This shift isn’t happening in a vacuum. AI-powered search has been heating up, with OpenAI’s ChatGPT Search and Perplexity AI both offering their own takes on AI-assisted browsing. ChatGPT Search integrates OpenAI’s conversational abilities with web access, but it can still struggle with sourcing real-time information. Perplexity AI, meanwhile, prides itself on transparency, always citing sources alongside its answers. Google, being Google, wants to combine deep AI reasoning with its long history of crawling and ranking the web.

Of course, any time AI takes a bigger role in search, there are questions. Will AI Mode and AI Overviews make it harder for small content creators to get traffic if Google keeps more users within its own ecosystem? What biases will even more complex synthesized answers introduce? Google insists that human oversight and ranking systems are still in play, but the company also acknowledges that AI is a work in progress. There’s a fine line between an AI-powered search assistant and an all-knowing gatekeeper that decides what’s “true” before you even click a link.

Beyond the potential pitfalls, AI Mode represents a shift in online research from passive to dynamic. It moves the burden of crafting the right query, clicking through results, and assembling information from different sources from you to the AI. Faster answers, smarter suggestions, and less time wasted on irrelevant links is a tempting proposition. But how good can it actually be compared to you putting little thought into it? AI Mode may as well be called Lazy Mode. Will you still bother clicking through to the long-form articles, deep-dive blog posts, or thoughtful articles on tech news websites for context and nuance beyond an AI summary at this level?

You might also like

• Yes, Google's new Gemini 2.0 Flash is much better than the old 1.5 model – here's what I found
• Google is bragging about Gemini 2.0 Flash, but how does it compare to ChatGPT for casual AI chatbot users?
• Google Gemini's new model is the brainstorming AI partner you've been looking for

Beneath the ES90's class-bending proportions is a new 800-volt EV architecture, enabling faster charging and improved efficiency.

Full spoilers follow for Invincible season 3 episode 7.

Well, I warned you that Invincible season 3 episode 6's mid-credits scene confirmed that what would follow was an absolute bloodbath.

To be frank, I'm a long-time Invincible fan, so I knew what was coming long before season 3's penultimate episode, titled 'What I Have Done?', which arrived today (March 6). Nevertheless, the show's depiction of The Invincible War, aka the near-world-ending event that's been teased since Invincible season 3 started on February 6, is even more soul-shattering than its comic-book counterpart. And, as we sift through the wreckage of this destruction-laden entry, I suspect you've got questions about what transpired.

Want to know who voices Conquest? Need more information about those enigmatic figures working with Angstrom Levy? Or are you hoping against hope that those two characters didn't actually die? I'll answer those queries and more in this article, so make sure you're caught up as full spoilers immediately follow for episode 7.

How do Rex Splode and Darkwing die in Invincible season 3 episode 7?

Redemption for Darkwing! (Image credit: Prime Video)

There are plenty of heroes who die in this episode. After all, Angstrom Levy unleashes 18 multiversal variants of Mark Grayson/Invincible on the Earth that the titular character – from now on, I'll call him Invincible Prime to spare any confusion – inhabits. They're all as powerful, not to mention more cruel, than Invincible Prime, too, so they quickly lay waste to his home world. Remember, Angstrom promised that, in return for them decimating Invincible Prime's planet and ruining Mark's life, he'd help these variants to conquer other universes, which is why they agree to aid Mark's arch-nemesis.

There are two major character deaths that matter more than most in 'What Have I Done?', though. Darkwing is the first of those, with the Batman-inspired hero sacrificing himself to save his fellow Guardians of the Globe by stranding one of Invincible's variants – and himself – in the Shadow-Verse. This realm is not only devoid of light, but also inhabited by terrifying creatures who prey on anything that enters their domain. It's safe to assume, then, that Darkwing and this version of Invincible are no more.

I'm not crying, you are... *sniff* (Image credit: Prime Video)

Episode 7's most soul-destroying demise, however, is reserved for one of the best Prime Video shows' most developed characters: Rex Splode.

I already knew he wasn't long for this world. Indeed, Invincible season 3 episode 5's sweet scene between Rex and Rae foreshadowed this (nobody in Invincible can have nice things!). At least Rex's sacrifice was a noble one, with the kinetic energy-based superhero using his own skeleton in a Hail Mary move to kill the Invincible variant who attacks the Teen Team's base and almost murders Rudy/Robot, Monster Girl, and Bulletproof.

It's the same way that Rex bows out in the source material, but Amazon's adaptation makes his death even more heart-breaking. He's enjoyed more airtime and character growth in Invincible's TV adaptation than he does in the graphic novels. Rex's character evolution from a wisecracking womanizer to heroic martyr in the hit animated series, then, has been one of its biggest triumphs. It's just incredibly sad that we'll never see him, nor hear Jason Mantzoukas' terrific take on the character, again. *sniff*

Who is Conquest? And who voices him in Invincible season 3?

Wait, is that Jeffrey Dean Morgan's voice!? (Image credit: Prime Video)

I'll answer the latter first as it's the easiest question to, well, answer: it's Jeffrey Dean Morgan.

The Walking Dead alumnus was first linked with a role in Invincible in early 2023. However, ahead of Invincible season 2 part 1's release, Robert Kirkman, co-creator of Invincible's comic book series and its TV namesake, told me that he was "going to disappoint people" by saying Morgan wouldn't voice someone in season 2. It's now clear that he was going to play Conquest in season 3, so I guess Kirkman can say he didn't actually lie to our faces.

Anyway, who is Conquest? In the comics, he's not only a high-ranking Viltrum Empire warrior, but also the second-most powerful of them all. The superpowered humanoid race's autocratic leader Grand Regent Thragg is the only one who's more formidable than Conquest, which means the latter is even scarier than Nolan Grayson/Omni-Man. Oh, and he's been sent to Earth to see if Mark/Invincible Prime is ready to perform his Viltrumite duties and prepare his planet to be taken over by the highly-advanced, dictatorial species.

I won't say much else about Conquest's role in Invincible because, you know, spoilers for future seasons. You'll definitely want to prepare yourself for a cataclysmic and incredibly tense season 3 finale, though!

What happens to the remaining multiversal Invincible variants?

"Angstroooooom!" (Image credit: Prime Video)

After their three-day-long, catastrophic attack on Invincible Prime's homeworld, the remaining eight multiversal variants – the other 10 have been killed by Mark and his fellow heroes – regroup at Mark's home at Angstrom's behest. However, when Angstrom says he wants them to bring Invincible Prime to him, they refuse because that wasn't part of the original deal. Cue the octet turning on Angstrom.

Knowing that he's physically outmatched by one Invincible, let alone eight, Angstrom reacts by activating his plan's fail-safe. Opening a portal behind each variant, he uses their spherical drones to push them through said multiversal doorways and maroons them on the desolate version of planet Earth that Angstrom and Invincible Prime fought on in Invincible season 2 part 2's finale. Hey, he says he was going to betray them anyway, so he might as well do so now...

Invincible season 3 episode 7's other heroes explained: Wolf-Man, Brit, Best Tiger, Tech Jacket, and more

'What Have I Done?' is full of Image Comic superhero cameos, such as Wolf-Man (Image credit: Prime Video)

I'll readily admit that I didn't recognize every hero that Global Defence Agency (GDA) chief Cecil Stedman calls on to defend Earth from the 18-strong group of multiversal Invincibles in Invincible season 3's penultimate episode. There are a few, though, that I recognize from the source material, and I'm sure that my fellow Invincible devotees will be delighted by their inclusion in Prime Video's adaptation.

The first – and perhaps most crowd-pleasing – is Wolf Man, who battles one of the variants in what appears to be New York City and winds up winning the contest. Wolf Man is the star of Invincible spin-off comic series The Astounding Wolf-Man, which is another of Image Comics series, and the eponymous hero's real name is Gary Hampton, who was the wealthy CEO of a record company until he was attacked by a werewolf during a family vacation. Now, he uses his abilities to do good, all the while trying to suppress his new-found animalistic instincts.

Jonathan Banks voices Brit in Invincible's TV adaptation (Image credit: Prime Video)

The next most recognizable face is Brit, who's voiced by one of nine new, big-name cast additions for season 3 in Jonathan Banks, who famously portrayed Mike Ehrmantraut in Breaking Bad and Better Call Saul.

Another Image Comics creation, Brit is a long-time friend of Cecil's who, per the source material, was born sometime before World War One. His abilities include superhuman strength, agility, and reflexes, and decelerated aging. He's also virtually indestructible – indeed, as noted in Invincible's graphic novels and other Image supplementary materials, Brit is immune to all forms of damage and disease. You'd wonder why he's not been used as one of the GDA's first lines of defence before now, then...

Well, this is a deep-cut Image Comics reference! Say hello to Best Tiger, everyone (Image credit: Prime Video)

Three other heroes – two of whom we first saw in Invincible season 2 episode 8 – also appear in 'What Have I Done?'. Kid Thor and Knock-Out are the aforementioned duo, and they're joined by Bolt, another Batman-esque individual who acquired his superhuman abilities after being hit by a lightning bolt, hence his superhero name. The trio appear at the prison where Invincible Prime is fighting Mohawk-vincible, mistake Invincible Prime for one of his multiversal variants, and attack him before they realize the errors of their ways.

But wait, there's more. The biggest deep-cut character in 'What Have I Done?' is arguably Best Tiger. A China-born superhuman, he's essentially Daredevil with guns (he's also not blind – he just covers his eyes with a bandana for the challenge). He possesses superhuman agility, enhanced agility, and is an expert martial artist. He's also an elite marksman so, really, he's a cross between Daredevil and one of his most notorious foes in Bullseye.

Holy crap, it's Tech Jacket! (Image credit: Prime Video)

Last but not least, this episode marks the debut of another key Invincible hero in Tech Jacket. I believe he's the individual who fights one of the Invincibles in space. If I'm right, that means Tech Jacket has actually appeared in Invincible's TV show earlier than he does in the comics.

Anyway, for the uninitiated: Tech Jacket is another Image Comics brand that stars Zack Thompson. One day, the ordinary high-school kid comes across a dying member of the highly-intelligent but physically weak alien race called the Geldarians. To make up for their lack of physicality, each Geldarian is given a Tech Jacket, a technologically-advanced vest that not only turns into a suit of armor when its user is attacked, but also grants the wearer near-invulnerability, super-strength, and the ability to fly and fire lasers.

Knowing its crashed spaceship will kill them both, the dying Geldarian gives its Tech Jacket to Thompson to save his life. Now permanently bound to one of the most powerful devices in the known universe, Thompson becomes a hero in his own right and is soon recruited by The Coalition of Planets to help them in their quest to bring down the Viltrum Empire.

Who are the Technicians in Invincible season 3?

Well, aren't you guys the definition of creepy... (Image credit: Prime Video)

The Technicians are introduced in the first scene of 'What Have I Done?', which takes place in the immediate aftermath of Mark's near-fatal beatdown of Angstrom from season 2 episode 8.

As he does in the comics, Angstrom somehow summons the strength to open one of his portals to the Technicians' laboratory and, after getting their attention, is pulled into their dimension. Despite his absolutely mushed-up face, he tells the Technicians to "fix him", which they duly do.

Alright, but who are they? Again, I'm not going to reveal too much because they continue to play a role in the graphic novels and, by extension, will appear in the show again at some point. All you need to know for now is that the Technicians are cybernetically-enhanced humanoids who hail from another dimension and specialize in the art of body modifications.

After patching up Angstrom, they make a deal with him for reasons I won't ruin here. As Angstrom finds out, it's also best to stay on their good side, too. Indeed, when Angstrom returns after his latest bout with Mark and tells the Technicians to replace the arm he lost – the one that was severed by one of Angstrom's portals when Mark grabbed it as the gateway closed – the trio initially refuse to aid him. He hasn't fulfilled his side of the bargain so, in light of needing their services again, they tell him that he works for them now. I guess Angstrom's one-man crusade against Mark will have to wait!

Invincible's long-running Ka-Hor joke explained

Maybe you'll escape one day, Ka-Hor... (Image credit: Prime Video)

A new season of Invincible wouldn't be complete without a check-in with Ka-Hor, and the R-rated series' latest chapter obliges. Wait, you don't remember who Ka-Hor is? Alright, allow me to explain.

A completely original character for Invincible's animated adaptation, Ka-Hor is a Egyptian mummy who's permanently bound to the tomb he was laid to rest in because of an unknown curse. The only way he can escape is if he binds his soul to a living, male host.

So close, yet so far (Image credit: Prime Video)

Three seasons in and Ka-Hor hasn't been able to leave his crypt. He was almost freed by a present-day worshipper called Zaiem in season 1, but Mark/Invincible accidentally prevented Ka-Hor's escape when he inadvertently caused a sandstorm near Ka-Hor's tomb and trapped Zaiem inside.

In season 2, Ka-Hor's attempts to break out are dealt a blow when the next two individuals to find his tomb are women. Once again, Mark traps them all inside Ka-Hor's burial chamber with another accidental sandstorm.

That brings us onto season 3. During a battle between Immortal and one of the multiversal Invincibles, Ka-Hor's tomb is dealt significant damage when one of Mark's variants crashes into it. Sensing an opportunity to escape, Ka-Hor tries to bind to said Invincible.

Unfortunately for him, he's not strong enough to overpower his potential new host. To make things worse, Immortal and his adversary take their fight elsewhere soon after, which humorously leaves Ka-Hor without another host body. Oh, and the two women he encountered in season 2 finally escape his crypt, too. At least somebody got what they wanted.

You might also like

• Invincible season 3 is another soaring entry of the popular Prime Video series that packs a real punch in more ways than one
• Invincible season 3 changes Oliver Grayson's shocking coming-of-age moment from the comics for the better – and for the worse
• Find out everything we know so far about The Boys season 5

The Trump administration's attacks on its northern neighbor have been met with confusion and anger by some Canadians who are now cancelling their trips to the U.S. in protest.

(Image credit: Patrick T. Fallon)

President Trump's administration has fired more than 20,000 federal workers. How does the federal workforce compare with those of other countries?

(Image credit: Kevin Dietsch)

Commentary: QR codes printed directly onto the machine make it easy for someone like me to upgrade my components with confidence.

Even if you take DOGE's savings claims so far at face value, its moves to cancel contracts, end leases and push federal agencies to reduce head count barely dent the government's balance sheet.

(Image credit: Saul Loeb)

Wisconsin is on track to break spending records once again in a high court contest that's at times turned heated. But these races weren't always like this.

(Image credit: Angela Major)

When Musk took over Twitter, he launched a payroll audit to root out dead workers getting paid. Now, Musk is launching the same campaign across the federal government.

(Image credit: Andrew Harnik)

• UK CMA was worried about Microsoft’s involvement in OpenAI
• “OpenAI does not qualify for investigation,” says Authority
• Critics worried about government pressure on CMA

The UK’s Competition and Markets Authority (CMA) has ended its investigation into Microsoft’s partnership with OpenAI and its multibillion-dollar investment into the company behind ChatGPT.

Despite Microsoft investing heavily in the AI startup and having exclusive use of some of its AI products, the CMA has now concluded the partnership has not been problematic.

The watchdog also considered how the companies’ relationship changed during the short period that CEO Sam Altman was fired, then rehired.

UK CMA deems Microsoft-OpenAI partnership healthy

The CMA said yesterday: “The CMA has decided that Microsoft’s partnership with OpenAI does not qualify for investigation under the merger provisions of the Enterprise Act 2002.”

Expanding on its conclusion in a phase one summary, the CMA noted that “no relevant merger situation ha[d] been created,” therefore it did “not ha[ve] to conclude on whether the other criteria for establishing a relevant merger situation [were] met.”

The Authority initiated the probe back in December 2023 because of Microsoft’s involvement in bringing Sam Altman back to OpenAI, but despite Microsoft’s “high level of material influence” over OpenAI, it doesn’t have full control over the company.

The official decision came just one day after the merger inquiry was launched, and critics have argued that political changes and government pressure on regulators to focus on economic growth may have guided the CMA’s conclusion.

Foxglove co-executive director Rosa Curling told the BBC: “This is a bad sign that Big Tech has successfully convinced the prime minister to defang our competition regulator and let Big Tech gobble up the current generation of cutting-edge tech – just like they did the last one.”

Microsoft welcomed the outcome: “Our OpenAI partnership and its continued evolution promote competition, innovation, and responsible AI development, and we welcome the CMA's conclusion, after careful and prudent consideration of the commercial realities, to close its investigation.”

You might also like

• We’ve listed the best AI tools and best AI writers
• Microsoft’s exclusive cloud deal with OpenAI is coming to an end
• Access the most powerful chips with the best cloud computing services

The Digital Operational Resilience Act (DORA) came into effect on January 17, 2025. Financial services institutions (FSIs) across the EU must now fully comply with its stringent cybersecurity and operational resilience requirements. But achieving compliance is not just about meeting regulatory expectations. DORA represents a fundamental shift in how financial institutions approach digital security, ensuring they can withstand cyber threats, operational disruptions, and third-party vulnerabilities.

For firms that have already established a compliance framework, the focus now moves to long-term resilience and continuous improvement. For those still catching up, the urgency to close security gaps has never been greater. Failing to meet DORA’s requirements carries not only financial penalties but also the risk of operational restrictions and reputational damage. In this new era of cybersecurity regulation, FSIs must go beyond basic compliance measures and embed resilience into their core strategies.

A shift in cyber resilience thinking

For years, financial institutions have relied on traditional cybersecurity approaches, primarily focused on perimeter security to keep external attackers at bay. However, recent cyber incidents have made it clear that threats do not always come from outside an organization. Many damaging breaches have originated from within digital supply chains, through third-party vulnerabilities, or from internal weaknesses. In 2023, third-party attacks led to 29% of breaches with 75% of third-party breaches targeting the software and technology supply chain. This evolving threat landscape has forced financial institutions to rethink their approach. The future of cyber resilience isn’t about building higher walls - it’s about securing every layer, inside and out.

DORA mandates a resilience-first mindset, shifting the focus from prevention alone to a more comprehensive strategy that includes rapid response and recovery. It is no longer enough to defend against cyber threats; organizations must assume that breaches and disruptions will happen and ensure they can respond swiftly and effectively. This change means cybersecurity is no longer just the responsibility of IT management. It is now a board-level priority, requiring CFOs, CIOs, and risk officers to play a direct role in overseeing governance structures, risk assessments, incident response planning, and ongoing security monitoring.

The growing role of automation in compliance

With DORA now in full effect, financial institutions are also navigating additional regulatory frameworks such as the NIS2 Directive and the Cyber Resilience Act (CRA), both of which introduce further security and operational resilience requirements. The increasing complexity of compliance is prompting many organizations to turn to automation to streamline regulatory processes.

Okta’s 2024 Businesses at Work report found that data compliance tools were the fastest growing applications with 120% year-on-year growth. As firms seek to reduce the burden on their security teams while ensuring continuous adherence to evolving regulations, the rising popularity of these tools is unsurprising.

Automating security audits, compliance validation, and real-time threat detection allows financial institutions to maintain compliance efficiently while also enhancing their ability to identify and mitigate risks before they escalate into major incidents. In a landscape where regulatory expectations will only become stricter, automation is important for maintaining both security and operational efficiency.

Addressing digital supply chain risks

One of the most pressing concerns for financial institutions under DORA is the security of their digital supply chains. High-profile cyberattacks in recent years have demonstrated that vulnerabilities often originate not from within an organization's own IT infrastructure, but through weaknesses in third-party service providers, cloud platforms, and outsourced IT partners. DORA places a strong emphasis on third-party risk management, making it clear that security responsibility extends beyond a firm’s immediate network.

Ensuring supply chain resilience requires a proactive and continuous approach. FSIs must conduct regular security assessments of all external vendors, ensuring that partners adhere to the same high standards of cybersecurity and risk management. It is no longer sufficient to perform security checks only at the beginning of a partnership; ongoing monitoring and real-world scenario testing are essential to ensure that contingency plans hold up under real conditions. The ability to anticipate and respond to emerging threats within the supply chain is critical to maintaining operational stability and regulatory compliance.

Navigating post-implementation compliance challenges

While many FSIs had operational resilience frameworks in place before DORA’s enforcement date, aligning these existing efforts with the regulation’s EU-wide supervisory structure presents new challenges. Firms that have not been closely following the consultation process may struggle to adapt to these additional requirements.

At this stage, financial institutions must prioritize regular compliance evaluations to ensure that their security frameworks remain aligned with DORA’s evolving mandates. Conducting a gap analysis is critical to identifying areas where improvements are needed. Engaging with regulators, industry bodies, and technology partners can provide valuable insights into best practices and common pitfalls. Additionally, collaboration within the financial sector will be essential, as firms can learn from each other’s experiences and share strategies for maintaining long-term compliance.

The cost of non-compliance

The consequences of failing to comply with DORA are severe. Regulators now have the authority to suspend business operations, issue cease-and-desist orders, and demand access to sensitive data for compliance reviews. For critical third-party service providers, non-compliance could result in financial penalties of up to 1% of their global daily turnover for up to six months - a staggering cost that could significantly impact business operations.

Beyond regulatory penalties, the reputational damage of non-compliance may be even more devastating. The financial sector operates on trust, and any failure to meet cybersecurity standards can lead to a rapid loss of confidence from both consumers and investors. A single security lapse or compliance failure can undermine an institution’s credibility, and once trust is lost, rebuilding it can take years. FSIs must recognize that compliance is not just about avoiding fines - it is about preserving their reputation and long-term viability in an increasingly digital financial ecosystem.

The role of identity security

One of the most effective ways to strengthen cybersecurity resilience under DORA is through identity management (IAM). Research indicates that 80% of cyberattacks originate from compromised credentials, making authentication and access control a top priority for financial institutions.

A robust IAM strategy involves implementing multi-factor authentication (MFA), enforcing least-privilege access policies, and continuous monitoring for credential-based threats. The adoption of a zero-trust security model, where no user or system is automatically trusted, further enhances security by ensuring that every access request is verified before granting permissions. As cybercriminals continue to develop more sophisticated attack methods, securing user identities will remain a cornerstone of both regulatory compliance and overall cyber resilience.

An opportunity for long-term resilience

DORA has transformed the cybersecurity landscape for financial services firms. Compliance is no longer a one-time activity - it is an ongoing effort that requires constant adaptation to emerging threats and regulatory updates. Organizations that approach DORA as an opportunity to strengthen their overall cybersecurity posture will be best positioned for success.

FSIs that invest in proactive security strategies today will not only protect themselves from regulatory penalties but will also build stronger, more resilient digital ecosystems. Cyber resilience is now a business imperative, and those that take it seriously will emerge as leaders in the evolving financial landscape. Compliance in itself should not be the security strategy of any organization, but it is a rising tide that raises all ships to a better security foundation to the benefit of all.

We've set up a list of the best network monitoring tools.

This article was produced as part of TechRadarPro's Expert Insights channel where we feature the best and brightest minds in the technology industry today. The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/news/submit-your-story-to-techradar-pro