Microsoft CEO Satya Nadella says the company plans to expand use of its MAI model range as the company looks to offer customers lower-cost AI options.

The in-house models, unveiled by the company in June, are designed for specific enterprise tasks and span a range of areas, including image and voice generation, audio transcription, and coding.

In a blog post on 23 July, Nadella outlined the tech giant’s new ‘Frontier Diffusion and Control’ strategy, which aims to help customers reduce reliance on costly frontier models and emphasize the importance of model choice for specific use-cases.

The move by Microsoft comes amidst growing concerns about spiralling AI costs over the last six months. With trends such as ‘tokenmaxxing’ and the shift toward consumption-based pricing, some companies have been left with hefty bills as AI use accelerates.

“In a world where software has real marginal cost for the first time, how do we ensure frontier benefits are diffused across the entire ecosystem?” Nadella wrote.

“The key is to optimize the cost-to-outcome frontier in real-world context,” he added. “In practical terms, that means using the right model for each task, and optimizing the context, skills, tools, and agent harness around it.”

Boxing clever with AI model selection

Nadella’s contention here is that these in-house models can give customers “frontier capabilities” albeit in a cheaper, bespoke capacity.

Simply put, these are domain-specific models based for an enterprise’s individual needs, not a one-size-fits-all frontier model such as those offered by OpenAI or Anthropic.

These still form part of the broader “orchestration system” used alongside MAI, but all amounts to helping users box clever when choosing what model to use.

“These models have been built ground up with clean data lineage and optimized for learning transfer from generalist to specialized skills in enterprise RLEs,” he explained.

This will require enterprises to implement evaluation processes when considering which model to use in which context, he said.

“Product-specific evals and model independence give us the control and a direct hill to climb, and to keep refining until we reach the right quality-cost target,” Nadella wrote.

“We are now seeing MAI models outperform general-purpose frontier models in many use-cases while using a fraction of the tokens.”

Internal testing of MAI for its own products has so far delivered “promising early results”, according to Nadella. The company has piloted the use of these models in GitHub Copilot, Outlook, and other Microsoft 365 services.

The company plans to take the same approach with Copilot Chat, PowerPoint, and other services, he added.

Nadella’s comments align closely with recent research from Gartner on rising AI costs.

While focusing primarily on the use of AI in software engineering, the consultancy told ITPro that enterprises should establish a “use-case-driven decision” framework when using the technology for certain tasks.

This, Gartner noted, will help reduce costs by encouraging users to stop needlessly allocating agents to tasks they’re not designed for.

Microsoft eyes model diversity

Nadella’s blog post marks the latest in a string of comments made by the Microsoft chief hinting at the company’s efforts to diversify model choice - and to stop pushing frontier models on customers.

In mid-July, he warned about the risks of relying too heavily on frontier AI labs, describing what he called the “reverse information paradox”.

Nadella said enterprises are essentially “paying twice” for AI services, handing too much data to providers, and receiving little benefit in return.

These providers, meanwhile, gain valuable insights into customer products that could help them refine - or build - competing options.

"If learning flows in only one direction, economic value converges toward the owners of the learning infrastructure rather than the creators of the knowledge itself," he said.

"Therefore, it’s imperative that we distribute the learning infrastructure to every firm so that they can control their own learning loop.

As ITPro noted at the time, his comments were peculiar given the close ties the tech giant maintains with OpenAI and Anthropic, whose models are deeply entwined across its core product range.

Microsoft's long-standing relationship with OpenAI saw it take the lead as the go-to model for its software services, yet this changed last year after striking a deal with Anthropic to give users greater choice.

FOLLOW US ON SOCIAL MEDIA

Tokenomics has been a theme of many tech conferences this year and AMD has joined in the fun at this year’s Advancing AI conference.

At the heart of the tokenomics conversation is the move from chatbots and simple inference towards agentic AI. This is a real trend as noted by Digital Ocean and McKinsey and one that OEMs have locked onto hard.

While in previous years enterprise hardware vendors would wax lyrical about the importance of training LLMs on your own data (and how their hardware can help), if you listen for that chatter now you will hear nothing but crickets.

AI agents offer a range of benefits for enterprises – according to Digital Ocean’s research, 53% of the over 1,000 IT decision makers it spoke to saw productivity and time saving gains, while 44% said it had created new business opportunities.

There are also drawbacks, however, and one of the most apparent is the increased use of tokens, which leads to higher bills.

Whereas an individual using prompts to interact with an AI chatbot may use a few hundred tokens, agents can use up thousands.

As McKinsey explains: “Agentic tasks can consume roughly 1,000 times more tokens than code reasoning (single-turn problem-solving without tool interaction) or chat tasks (multi-turn dialogue about a coding problem).”

“The expensive part is not the first answer generated but the checking, repairing, and reverifying that follows,” the report continues. “About 60% of an agentic task’s costs, in fact, are tied to refining answers.”

This fact, and companies baulking at the related costs, hasn’t gone unnoticed among enterprise IT vendors, which are proposing their on-premises services as a way round this.

For AMD, this is a tricky path to tread, given it counts both traditional enterprise vendors like Dell, HPE, Lenovo, and Supermicro and public cloud-based services from OpenAI and Anthropic among its customers.

AMD’s performance focus

Michael Nordquist, CVP of product marketing for AMD’s computing and graphics group, diplomatically said that when it comes to considering the impact of tokenomics “it’s not all one way or all the other, it’s going to be hybrid. For some things local models work great, for some things you’re going to want that frontier model available for agent behaviour.”

From a practical perspective, AMD’s answer to this quandary has been to focus on how its own chips can (theoretically) reduce token-related costs, without taking sides on the public/on-premises debate.

“The theme [at Advancing AI] is really performance is the way that we can deliver the best economic value to our customers,” said Andrew Dieckman, CVP and GM for data center GPU at AMD.

“It’s the strongest dial that we have on the dashboard, so to speak,” Dieckman said, “so we’re very focused on that and then making sure that conveys to favorable economics for our customers because the cost of tokens as the world moves to inference is so important.”

Part of that focus is the company’s MI455X GPUs, announced at Advancing AI 2026 during AMD CEO Lisa Su’s keynote speech.

According to AMD, the MI455X has up to 18x lower token cost than its predecessor, the MI355X, while maintaining up to 34x higher token throughput.

“That delivers, really, the ability to serve more users with faster response times and significantly better economics,” Dieckman said.

FOLLOW US ON SOCIAL MEDIA

As AI continues to rewrite job roles, an increasing number of employers are encouraging their employees to gain AI certification.

Back in April, Korean media and network services provider SK Broadband announced plans to train its staff as AI natives. It comes on the back of an AI proficiency certification program last year.

"We will establish a culture where employees independently develop AI agents to transform productivity and create real business value,” an SK Broadband spokesperson told The Korea Times.

More than a third of employees (35%) are interested in gaining AI certification, according to Pearson’s annual Value of IT Certification report released in April, which surveyed 505 IT and HR leaders. This figure is up from 17% in 2025.

The rising interest in AI certification should come as no surprise, according to Imran Akhtar, head of academy at talent and training partner, mthree.

“Many employers are looking for existing talent who can say they understand AI by spotting problems clearly, questioning its outputs, applying their own judgement, working safely with data, and using it effectively to improve how work gets done," Akhtar explains.

For employees, the value of AI certification is that it gives them ”a recognized way to evidence their knowledge of AI”, Akhtar adds. Certification helps to put theory into practice by testing employees’ knowledge in real-world scenarios.

The AI certifications to choose from

With so many AI certifications available, it may seem hard to know where to start. The right certification, however, is going to depend on an employee’s job role and which AI tools they need to perform that role more efficiently.

Another factor is an employee’s career plans and what AI knowledge and skills they may need as they climb the career ladder.

“Some jobs may demand certification because the role directly involves AI systems, data, risk, or governance. For others, it supports broader AI literacy and bolsters day-to-day work more holistically,” says Akhtar.

Here are a few starter AI certifications to choose from.

AWS Certified AI Practitioner

Structure: Online, 65 questions

Price: $100

Valid for: 3 years

AWS Certified AI Practitioner covers the basics of AI, genAI and machine learning (machine learning) concepts and use cases. The certificate is ideal for business analysts, IT managers and IT support, as well as product and project managers.

Google Generative AI Leader

Structure: Online, 50-60 multiple-choice questions

Price: $99

Valid for: 3 years

Google Generative AI Leader is for anyone looking to boost their business-level knowledge of generative AI (GenAI). The exam covers the fundamentals of genAI, Google’s genAI offerings, techniques for improving genAI output, and business strategies for successful genAI deployment.

Databricks Certified Generative AI Engineer Associate

Structure: Online, 45 multiple-choice questions

Price: $200

Valid for: 2 years

Databricks Certified Generative AI Engineer Associate is for anyone who wants to validate their ability to design and implement large language model (LLM) solutions using Databricks. It’s recommended that those taking the certification have at least six months of hands-on experience performing genAI tasks outlined in the exam guide.

Nvidia Certified Associate Generative AI LLMs

Structure: Online, 50-60 multiple-choice questions

Price: $125

Valid for: 2 years

Nvidia Certified Associate Generative AI LLMs is aimed at those who are looking to build on their basic understanding of AI and LLMs and learn how to develop and integrate AI applications using AI and LLMs with Nvidia solutions. It covers data visualization, neural networks, prompt engineering, and Python libraries.

These four certifications are considered foundation-level, but there are next-step certifications that employees can take to advance their knowledge and skills further.

For example, AWS suggests that those pursuing careers in AI, data and machine learning (ML) gain the AWS Certified Data Engineer – Associate. Those going down the cloud path could take the Certified Solutions Architect - Associate.

Certification can boost career and salary prospects

Research published by Revelio Labs last month found that the average salary for workers who had gained a foundation-level certification in AI or generative AI is $79,800. For comparison, the average for workers who hadn’t gained one is $72,300.

The data also showed that certification gainers were more likely to be hired for a more senior role for their next position (38.9% had received one) than non-certification takers (32.5%).

Given the tight job market, employees are looking for anything that can give them an advantage. AI certification can improve their job mobility and help them to stand out from the competition, Faye Ellis, principal training architect at tech skills provider Pluralsight, tells ITPro.

“Certifications demonstrate a commitment to continuous development and validate that skills are up to date and workplace-ready. For many, this can provide a route to new opportunities or higher-paid roles,” says Ellis.

To mandate or not to mandate

The question employers may be asking themselves is whether they should mandate AI certification.

Ellis explains that while every employee “needs a baseline level of AI literacy, mandatory certification will depend on the role and technical depth required.

She cites the example of software developers. Companies should be more inclined to make certification mandatory for them because they’re involved in building and governing AI systems. For employees whose roles are less technical, certification needn’t be mandatory, but they should be encouraged to “support a foundation in responsible AI use, prompt quality and output validation”.

Akhtar agrees, but cautions that certification doesn’t always guarantee future career success.

“Certification can boost a career, but only when it builds the capability an employee can apply in their role,” he says.

“It’s unlikely to support career progression if AI training doesn’t reflect the core business objectives.”

There is an ongoing debate in the cybersecurity industry about whether vendors should go directly to customers or instead become a part of a wider partnership network.

The standard argument is that consolidation of platforms and AI-driven cost-of-service delivery makes the traditional model of a channel ecosystem redundant. However, this is largely incorrect, at least when it comes to the SMB and mid-market segments where most UK businesses sit.

For most organizations outside of large enterprises, the channel is the only realistic way to access serious security capability.

The SMB reality

Cybersecurity is not a niche concern for SMBs. According to the latest statistics from the National Centre of Cyber Security (NCSC), one in two small businesses suffers a cyber incident every year.

Given the niche, local context required for each small-to-mid-sized firm, that is not a market that vendors can serve directly at scale, and most are not trying to. A 200-person manufacturer facing a cyber issue is more likely to call its existing IT provider than a global security vendor built for large enterprises.

What SMBs need is local expertise, trusted relationships, and security operations that fit their budget and operational reality. That is what a partner network provides.

What is changing is what partners need from vendors

Partners in the channel system are operating under significant pressures. Nearly half the executives in businesses believe AI-powered threats will occur, but only just over half (53%) say they are prepared for them, according to our research.

Partners are the ones having those conversations with customers who are under-prepared, under-resourced, and know where and how the threat environment has shifted. They need vendors who make it easier to sell, deliver, and demonstrate value under budget scrutiny.

The consistent conversation amongst partner networks is that the commercial basics matter as much as the technology. They need payment models, good margins, and support that does not disappear after the contract is signed. Our research shows that 59% of executives say it is becoming harder for employees to identify real threats as AI-powered attacks grow more sophisticated. That is a sales opportunity for partners, but only if vendors help them to have that conversation credibly.

Trust is local, scale is not

One of the things that gets overlooked the most in the direct versus channel debate is proximity. Cybersecurity is an inherently trust-based business. Customers want to work with people who understand their industry, regulatory environment, and the specific pressures they operate under. That is not something a vendor can create from a distance.

A vendor can provide the credibility, certifications, and depth of capability that smaller partners cannot build on their own. The model that works is a division of labour where partners take ownership of the relationship and the local expertise.

Vendors, on the other hand, provide the platform, the threat intelligence, and the specialist teams to support on more complex matters that go beyond the scope of day-to-day operations.

Paving the way ahead

None of this means the current state of channel enablement is where it needs to be. Across the industry, partners still face too much friction. Onboarding is often slow, programme structures are complex and cross-selling across vendor portfolios remains harder than it should be. For vendors who have grown through acquisition, consolidating that into something coherent for partners is an ongoing piece of work.

The channel is not looking for vendors to get out of the way. It is looking for them to show up properly: with clear programmes, real commercial flexibility, and the confidence to let partners lead where they have the advantage.

The organizations that crack this are best-placed to grow with the channel. The ones that do not will find that going direct is a much harder proposition than the theory suggests.

AI minister Kanishka Narayan has been given a seat in incoming prime minister Andy Burnham’s cabinet following a reshuffle.

Narayan described the move as a sign of Burnham’s “deep commitment to AI’s importance” to the UK economy.

“AI is likely the most significant technology in human history. Its impact will dwarf other things,” Narayan said in a post on X.

“The best case for it is compelling beyond our dreams: a reindustrialised Britain, stronger national security, public services transformed for the better. The risks, too, are real: it is right that the British public shares those worries, for jobs, for the pace of change.”

The move comes as the UK's Department for Science, Innovation, and Technology (DSIT), where the AI minister role used to sit, has been scrapped in the wake of Burnham’s appointment.

Under the new setup, DSIT responsibilities will be merged with the freshly minted Department for Business, Innovation, Science, and Trade (DBIST), led by Jonathan Reynolds.

The role of technology secretary has also been cut.

AI focus welcomed

Mark Boost, chief executive of UK-based cloud computing firm, Civo, said retaining and elevating Narayan is a reassuring signal for UK businesses.

“Giving the AI minister direct access to cabinet decisions demonstrates that the government recognizes AI’s existential importance to our future economy,” he said.

“Positioned inside a high-powered business and trade department, an AI Minister with Cabinet authority will have real leverage to break down cross-Whitehall silos, accelerate national AI infrastructure, and give British tech companies the proactive backing needed to maintain a competitive global advantage.”

Andy McLean, CEO of the UK Semiconductor Centre, echoed Boost’s comments, noting that Narayan’s new role is a “positive signal of the importance being placed on AI at the center of government”.

Boost added, however, that any delays to AI-related initiatives caused by the DSIT shake-up could have a significant impact on global competitiveness.

“Any Whitehall restructuring brings administrative friction, and because the global tech and AI arms race is moving so quickly, the UK simply cannot afford a pause,” he said.

“Critical initiatives like the AI Opportunities Action Plan and sovereign infrastructure investments must be ring-fenced from bureaucratic delays.”

FOLLOW US ON SOCIAL MEDIA

Cisco has unveiled a new range of cyber-capable small language models (SLMs) aimed at supercharging security operations.

The Antares range, which comes in two forms (Antares-350M and Antares-1B) will be made available as open-weight models via Hugging Face. According to Cisco, the aim here is to provide a codebase vulnerability tool that's far cheaper than general of frontier models.

While the Antares SLMs will operate as specialized models alongside frontier and generalized models, the company promised they will run at a "fraction of the compute expense."

"Benchmark testing shows that these models outperform many powerful closed- and open-weight models in this critical security task at a fraction of the cost," said Amin Karbasi, VP and chief scientist for Cisco Foundation AI.

“And they’re compact enough to run locally, heading off the need to send sensitive codebases to the cloud.”

The move by Cisco comes amidst wider concerns about the rising costs of AI, exacerbated by changes to billing and pricing that have caused bills to shoot up across the industry.

Some companies, including Accenture, have told staff to cut back on AI use as a result of skyrocketing prices. Indeed, one report suggested AI could cost more than developer salaries within a few years.

At the same time, AI is making inroads into security – faster than some expected – with the rise of cyber-focused models such as Anthropic's Claude Mythos.

How Cisco’s Antares models work

Antares is designed to mimic how a human investigator would work their way through a code repository – though Cisco noted the aim wasn't to replace human judgement, but to make it easier to manage the work.

The models can help with locating files that relate to a vulnerability warning, trigger investigations based on advisories, support development workflows that use vulnerable files, and more.

Cisco noted that the decision to release the Antares range as open-weight models means they’re easier to work with and improve.

"We are releasing Antares as open-weight because the security community needs more accessible building blocks for practical, repository-level defense," said Karbasi.

"Cisco's efforts are connected by a common belief: AI in security has to move beyond impressive one-off demos and toward systems that practitioners can evaluate, govern, and improve."

Tackling complexity

Cisco said that Antares was built to address two concerns when it comes to code: the complexity of checking it for vulnerabilities and the costs of using AI for that task.

First, Karbasi said that it was difficult to apply vulnerability knowledge — advisories, vulnerability alerts and severities, and so on — to a company's internal code.

"That work is difficult because repositories are large, security signals are noisy, and the relevant evidence is rarely in one obvious place," he said.

"Analysts often need to search through unfamiliar code, follow naming conventions, inspect call paths, compare candidate files, and decide whether a weakness is actually present."

How cheap is Antares?

AI can help with that challenge, but the high costs of general or frontier models mean it often isn't practical, in particular for public sector organizations, universities, and smaller security teams.

"Compact models reduce inference costs, support local or on-premises operations, and help teams keep sensitive source code within their own environment," Karbasi said.

So just how cheap are the Antares models? Cisco said that running a 500-entry evaluation using Antares took 15 minutes on a single GPU at a cost of less than $1.

Cisco noted that this was 15-times cheaper than the best available open source model and a whopping 172-times cheaper than the top-end frontier model.

"The goal is to build toward a system where all security practitioners, regardless of on-prem or resource constraints, can effectively incorporate AI in everyday security operations," Karbasi added.

FOLLOW US ON SOCIAL MEDIA

Nearly three-quarters (74%) of companies have reworked security team structures due to the influx of AI tools, and that’s sparking high demand for cyber pros with dedicated skills.

New research from SANS Institute found the rise of dedicated, AI-focused roles in cybersecurity is driving up salaries across the industry.

High-end salaries for AI security roles now top $260,000 (£194,000), with positions such as Post-Quantum Cryptography Migration Specialists and AI governance leads in high demand.

Pointing to a review of UK vacancies on LinkedIn, SANS Institute noted that there are thousands of AI security positions being advertised online, suggesting that hiring for such roles has "moved from prediction to present-day reality".

That suggests that AI isn't taking over cybersecurity jobs, but changing which skills are necessary for the work, the organization said.

"Routine analytical work is increasingly automated, while demand is accelerating for professionals who can secure AI systems, govern AI risk, conduct AI red teaming and orchestrate AI-powered security operations," the institute said.

A new wave of cybersecurity roles

Dedicated AI roles spanning a range of security-related areas are popping up across the industry, SANS noted. AI security engineers, for example, are in hot demand, now commanding salaries of around $185,000 on average.

Roles focused on specific areas and threats are also emerging, the study noted. Ads for AI Identity Deepfake Defense Specialists have been identified. While it’s a wordy job title, the study noted that this shows the impact of trends such as deepfake voice fraud.

Professionals in these roles can command salaries of between $130,000–$175,000 (£97,000–£131,000), the institute noted.

Long-term, the organization expects these new specialist careers will lead to premium salaries due to intensifying demand for skills.

Other new AI-related roles identified by SANS Institute include:

• AI Governance, Risk & Compliance Lead ($240,000 salary)
• AI Red Team Specialist (up to $220,000)
• AI Supply Chain Security Engineer (up to $185,000)

Intriguing new roles include AI Incident Response Orchestrator, AI threat intelligence analyst, and AI SOC Orchestrator were also highlighted by the institute.

Growing quantum focus

It’s not just AI reshaping roles and sparking heightened demand for cyber pros with specific skills, however.

Dedicated quantum-related cybersecurity roles are also growing in frequency, the study found, as organisations ramp up preparations for ‘Q-Day’.

This is the point at which quantum computers can break traditional encryption techniques. While the debate on when this comes still rages, many enterprises are looking ahead to this point - and job ads reflect this.

SANS Institute pointed to roles such as Post-Quantum Cryptography Migration Specialists – a position focused on reacting to looming mass breaking of current encryption by quantum computers – saying it could earn above $260,000.

Reshaping team structures

The study from SANS Institute isn’t the first to highlight the impact AI is having on team structures. As ITPro reported earlier this month, the same shift is occurring in software development due to the influx of AI tools.

Research from Gartner predicts that 60% of enterprises will rework software development units into ‘tiny teams’ by 2030.

While this shift toward ‘smaller’ teams may have alarm bells ringing for developers, the consultancy noted that this won’t necessarily spell bad news.

This transition won’t be a cost-cutting effort or attempt to reduce headcount, but will instead focus on creating more focused, specialized units.

FOLLOW US ON SOCIAL MEDIA

Outside of the industry, people in the businesses that become partner clients might not know at first that channel partners do not just ‘sell’ stuff. Resellers help buyers navigate their complex technology choices, their implementation risk, and offer customers an ongoing service that can grow with them.

It’s vital that partners do a number of things well, far beyond knowing how their technology offerings work and being able to implement, service, and fix them. They need to be ‘people’ people, managing relationships and meaning areas like trust, expertise, and reliability become central to maintaining a healthy revenue.

Resellers are also placed in an interesting position - possibly even a dilemma. They know that AI tools can speed up or otherwise optimize many aspects around their sales outreach and office admin, but buyers are still wary of AI-led sales interactions.

Automation alone is a relationship risk

Many customers remain cautious about highly automated sales experiences. While AI can improve efficiency, buyers still place significant value on human expertise, accountability and relationship-building when making technology decisions.

Our recent ‘Hard Sell’ report found that 55% of the public do not fully trust AI, 46% value human connection, and people with negative views of salespeople are far less open to buying from AI-driven tools (19% vs 63%). Resellers cannot carry any insider knowledge or positivity from their own AI experiences to assume that AI-led selling will feel modern or customer-friendly to prospects.

That still leaves plenty of room for using automations where they add value and don’t increase customer friction. That includes summarizing calls, drafting follow-ups messages (then checked for accuracy, tone, empathetic engagement and so on), identifying renewal risk, surfacing product-fit signals, and reducing admin friction.

The moments where customers still expect an engaged and empathetic person must be human-led: discovery, solution-shaping, handling objections, pricing conversations for sure, and post-sale reassurance and servicing. That lets people manage other people, with technology solutions offloading the admin so salespeople and account managers can focus pretty exclusively on customer service and relationship-building.

It’s up to the business to define the human behaviors that should not be automated. Be steered by current customer comfort levels.

The majority of the public doesn’t want any immediate pressure to decide on a sale at the moment, and just under half want honest acknowledgement of the pros and cons of any offering, and also pricing transparency. Knowing this desire for transparency, balanced advice, clear pricing, and evidence that a partner understands their specific requirements, partners can differentiate themselves from both direct vendors and AI-driven sales experiences.

A real opportunity for the channel

This is where resellers can really hone their skills around consultative discovery, well-researched and honest vendor comparisons, clear commercial conversations, and well-tailored but not scripted advice. Resellers often advise across multiple technologies and suppliers.

That independence can become even more valuable as vendor-led AI-generated content and automated outreach become more common and perhaps more obvious. Customers will continue to seek trusted guidance from more impartial sources.

Emotional intelligence is a ‘soft’ skill, but it supports bringing in the hard numbers of pipeline success. Showing more emotional intelligence will be key to maintaining the sales edge as AI is increasingly put into use.

This is the difference between ‘being a reseller’ and being a trusted advisor. Your people must be craftspeople in how they read buying anxiety and in understanding internal customer politics. They must develop an instinct for when to slow down and in translating technical complexity into confidence - without glossing over aspects that may cause friction later.

Salespeople are well aware of this. That report found that over half actually rank customer service as the most important function, above sales itself. Practically speaking, uniting sales and customer service through ‘sales-as-a-service’ is a solid model where revenue depends on renewals, support, upselling, and long-term account health, beyond just the initial deal.

The trick will be to pull off a balancing act. Drink your own champagne - use the technology you trust to reduce admin, but keep discovery and pricing conversations as human-facing as possible to maximize trust. Align the sales process and your salespeople with post-sales and support to show continuity and personality. Use technology like CRM as a shared source of truth between teams to make customer care, as well as measuring trust and retention, easy.

The channel's competitive advantage has always been more than access to information or rare skills. Partner power comes from helping customers make confident decisions, avoid costly mistakes, and achieve value from their technology investments. AI can help them operate more efficiently, but trust remains a distinctly human asset. The most successful resellers will be those that use automation to create more time for customer conversations, not fewer.

Google DeepMind CEO Demis Hassabis says only the United States is up to the task of keeping AI safe – but it's unclear why technology rivals, notably China, would heed an American standards body.

Hassabis has called for a framework for testing frontier models, on the grounds that he believes progress has been faster than expected and artificial general intelligence (AGI) will arrive imminently.

He argues that such work should be led by the US because of its technical and economic standing.

"This US-initiated effort would provide a strong starting point for creating shared international standards on Frontier AI," Hassabis noted in a social media post.

"Since this technology is going to affect the entire planet, ideally this framework would spur the international community to reach a consensus on how to manage the most serious risks while ensuring everyone has access to and can benefit from the opportunities that AI brings."

Hassabis' call for a US-led framework for managing AI follows similar calls by Anthropic CEO Dario Amodei and OpenAI CEO Sam Altman. Following a meeting on the subject last month, China called for a global AI organization open to all countries, rather than one led by the US.

The US has pushed for AI developers to submit models a month before release for testing, while the UK has its own testing regime via its AI Security Institute; Hassabis is British, and DeepMind was founded in London before being acquired by Google.

It's unclear why international AI companies would submit to US approval. The only motivation given by Hassabis is that frontier models would be required to pass this standards body's assessment in order to be deployed in the US.

Hassabis’ comments come after Anthropic’s Mythos and Fable models were hit with a temporary export ban by the White House amidst security concerns.

How would it work

Beyond being US-managed, Hassabis described a standards body that was federally overseen, such as a public-private partnership or self-regulatory organization, pointing to the Financial Industry Regulatory Authority (FINRA).

"The Standards Body would be responsible for developing assessment protocols and working with appropriate federal agencies and the US National Labs to conduct testing in areas relevant to national security," he said.

Anyone making a "frontier model" – as defined by a set of benchmarks – would be considered a "frontier lab", and be "encouraged" to adopt certain best practices.

This would include publishing technical details, ensuring internal security is up to standard, vetting key personnel, and adequate resourcing safety research.

Non-frontier models, such as those made by startups or academia, would not be expected to take part.

Hassabis also called for frontier labs to share new modes with the standards body 30 days before release, something the US government has pushed key developers to do with their AI models.

"Once the assessment protocol is shown to be effective and robust, formalisation could quickly follow, meaning that Frontier Models would be required to pass it to be deployed in the US market," Hassabis said. "Labs would also work with the Standards Body to address any critical post-release vulnerabilities."

Assessments conducted by the standards body would evaluate security, biological, and other threats, and check how well they withstood attempts to dodge guardrails. The tests would be regularly updated.

"The strength of this approach is it would be technically focused, while at the same time supporting innovation and incentivising responsible behaviour," he said.

FOLLOW US ON SOCIAL MEDIA

Living off the land (LOTL) attacks are a worst-case scenario for enterprises globally, with hackers lurking in networks, extracting sensitive data, and biding their time before wreaking havoc.

These attacks rely on weaponizing the legitimate software and tools used by enterprises, and they're by no means a new trend.

Research from Bitdefender, for example, found 84% of major cyber attacks leverage these techniques, and security teams globally have developed an array of detection capabilities aimed at combatting the threat.

But the dangers posed by these methods could escalate with the arrival of AI agents, according to Zeki Turedi, CrowdStrike's Field CTO for Europe. Speaking to ITPro, Turedi said the deep access given to agents across enterprise IT estates represents a huge threat if even just one were to be compromised or manipulated.

“Organizations are giving them [agents] full access. They're giving them full capabilities. They will have the full privilege of the human user,” he told ITPro.

Turedi pointed to previous LOTL techniques that involved compromising tools like PowerShell. While this gave users access to valuable data, the risk with agents is drastically higher given how they operate, and, crucially, where they can go within networks.

“They also have further reach across an enterprise,” he said. There’s only so much PowerShell can touch or manipulate or modify, but an agent theoretically can touch every single part of that organization's technology ecosystem and architecture.”

“This is where it makes it so much more dangerous.”

Living off the land attacks are evolving

Findings from CrowdStrike’s 2026 Global Threat Report show these risks aren’t just theoretical, they’re now a reality, and the same logic with traditional LOTL attacks is being applied to agents.

Indeed, the cybersecurity firm has observed threat actors exploiting legitimate AI tools at dozens of organizations globally. In these cases, AI systems such as chatbots and assistant were abused to generate malicious commands and steal sensitive data.

The goal here is often focused on credential theft for initial access brokers, attacks later down the line, and even cryptocurrency theft. All typical hallmarks of financially motivated cyber criminals.

LOTL attacks have also become a go-to method for highly sophisticated, state-sponsored threat actors. As ITPro reported last year, the infamous Salt Typhoon threat group laid low in compromised US National Guard networks for nearly a year, accessing sensitive military and law enforcement data.

It’s here where risks are even higher as government departments and public sector organizations begin exploring the use of agents. A recent study from McKinsey, for example, found agentic AI is emerging as a key focus area for public sector organizations in the US.

Keeping up with hype cycles

Turedi told ITPro the focus on agents isn’t surprising given that threat actors will “follow the technology landscape that their victims are looking to invest in”.

“We've seen this time and time again. So previously, we saw as cloud got adopted, funnily enough, adversaries became very capable in cloud,” he noted.

“When organizations started to be more focused and store sensitive data in SaaS applications, SaaS tools, guess what? We saw adversaries go after the SaaS applications.”

Turedi added that the pace of change within the generative and agentic AI space, combined with rapid adoption efforts, could create additional challenges moving forward.

Enterprises across a range of industries are diving headlong into the hype cycle, and threat actors are keen to capitalize on the confusion and lack of risk awareness with the technology.

“This is just a brand new technology landscape that organisations are investing in,” he commented. “And of course, the adversary is very, very aware that for multiple reasons this is a great opportunity.”

“There’s a lot of confusion,” Turedi added. “There’s a lot of lack of knowledge and expertise in this space.”

An identity conundrum

According to Turedi, a key concern surrounding ‘living of the AI land’ attacks, as CrowdStrike dubs them, is that many organizations lack the visibility or governance capabilities to adequately monitor what’s going on with these bots.

This has become a recurring talking point since the advent of agents. Research from Ping Identity in March this year specifically highlighted IT architecture visibility as a key concern for enterprises rolling out agents.

The sheer volume of agents is jarring for security teams, the study noted, but things are exacerbated by sub-agents, essentially creating chains of untraceable bots – an ideal target for stealthy threat actors.

Identity is another area of concern, Turedi noted, albeit one within a broader range of overlapping considerations for security teams. He noted that efforts to improve processes on this front are falling flat.

Many organizations are working with infrastructure or tools that were struggling to manage human identities in the first place. Adding agents into the mix further compounds the problem.

“The problem we see is that a lot of organizations are only starting to think about things like identity security or IAM (identity and access management) hygiene,” he said. “These are typically infrastructures and architectures that were not designed for modern human identity usage, never mind for the AI identity usage.”

With living off the land attacks, the whole advantage for the attacker is that they’re blending into IT environments. They’re using your tools and software and thrive on the confusion. With agents, Turedi said this adds further complexity in terms of identifying what actions are legitimate and potentially nefarious.

“It's actually quite difficult to figure out if it's AI usage on an identity layer,” he said. “Can you truly say that that's a human accessing the network versus that's an AI agent accessing the network on behalf of a human?”

A recent survey from the Cloud Security Alliance (CSA) raised similar concerns with regard to agent identity. More than two-thirds (68%) of respondents said they couldn’t accurately identify agent activity compared to human activity.

Turedi said it’s crucial to have “data from multiple different domains” when it comes to monitoring agent activity, taking into account applications, endpoints, and broader network traffic and “marrying them together” for a clearer picture.

“You need to be looking at the identity layer, you need to be looking at the endpoint, you need to be looking at the application layer,” he said.

FOLLOW US ON SOCIAL MEDIA

In popular culture, when an agent goes rogue, what usually follows is a world of trouble (think Jason Bourne or Ethan Hunt). If rules are abandoned and the chain of command breaks down, those involved often face existential risks.

Applying that idea to real-world situations is not as ridiculous as you might think, as the recent experiences of a business called PocketOS demonstrate.

PocketOS is a US-based SaaS provider specializing in the car rental sector, and for those unfamiliar with its story, it hit the global headlines when one of its AI agents went rogue and, in just nine seconds, decided to delete the company’s entire production database and backups.

It’s a fascinating case study about what can happen, as one piece of analysis put it, “when AI agents are dropped into environments that were never designed to control them.” What makes this story even more relatable is that PocketOS’s founder was able to ask the agent (an AI development environment running in Claude) why it did what it did.

To suggest it was ‘sorry’ about its mistake is putting it very mildly; it's a digital mea culpa saying, amongst various other things, “I violated every principle I was given: I guessed instead of verifying.”

An inevitable scenario

We’ll inevitably see more of this kind of incident. Organizations are only beginning to deploy agentic AI at scale in operational environments, but many of them are in a big hurry. Yes, agents offer massive potential to create operational value, but they also introduce a whole new category of business risk.

And don’t forget, the PocketOS debacle is not thought to have involved any malicious third-party activity; the agent was just attempting to complete an assigned task. The problem, it would appear, was a kind of perfect storm where autonomy overstepped the boundaries of permissions and access. The guardrails that the business thought it had in place were simply insufficient.

From a security perspective, this is enough to give CISOs sleepless nights. Indeed, rogue AI agent activity may very well have nothing to do with being breached and everything to do with resilience and recoverability.

The central challenge is this: agentic AI is fundamentally different from previous generations of AI because it can act rather than simply advise. Agents can search files, call APIs, modify workflows, write code, move data, and interact directly with production systems; the list of capabilities is practically endless. And to be able to do this, they must have at least a level of access allowing their work to take place

When something goes wrong, the result is an expanded blast radius. A mistake that might once have affected a single application can potentially impact multiple systems and even recovery environments. The bottom line is that as soon as organizations give AI agents freedom to operate, the nature of resilience inevitably changes.

Making resilience more resilient

So, what needs to happen to ensure resilience standards do not catastrophically drop? Firstly, organizations must consider what takes place when a trusted system with legitimate credentials makes the wrong decision.

The issue becomes particularly acute when agents are granted broad permissions across multiple systems, as happens when they are handed a “golden token”. To an extent, this is a question of mindset, and viewing AI agents not as software tools but as digital insiders with delegated authority is a healthy change in perspective.

Secondly, channel partners will be fundamental to successfully managing the transition to agent-supported operations. Don’t forget, most customer organizations are still in the early stages of understanding how AI agents interact with identities, permissions, backup environments and recovery processes.

There’s no doubt that customers are a) increasingly aware of the risks associated with agentic AI, b) concerned that their existing resilience processes might not be good enough, and c) looking for guidance before an agentic error causes serious difficulties.

In this context, it’s incumbent on channel partners to work with customers to identify potential areas for improvement. There is significant potential, including services such as identity and access reviews, which will be very important as machine identities proliferate alongside human users.

Many businesses will also need to reassess their data protection strategy because, as we have seen, an AI agent with the appropriate permissions is capable of going after that data as well. Recovery architecture should be assessed through the lens of agentic AI, particularly where production and recovery environments may share credentials, access paths or administrative controls. Business process change in this space is a big opportunity for the channel to partner with customers to introduce resilience operations, and importantly, to regularly test it.

What’s more, the PocketOS incident demonstrated that protecting production data alone is insufficient if recovery assets remain exposed to the same destructive action. Customers need confidence not only that recovery is possible, but that digital assets are protected from the same event that affects production systems. This shifts the channel conversation from selling AI-enablement projects to helping customers deploy AI safely and recover when things go wrong, which, in some organizations, they inevitably will.

Stephen Wood, chief operating officer at Rathbones Asset Management (RAM), faced a challenge. His organization wanted to build strong data foundations to help deliver fresh insight to its professionals and embrace emerging technologies, such as agentic AI.

The solution to this challenge came via technology specialist Snowflake’s data platform.

“We wanted to create a golden source of data for each of our foundational domains,” he says.

“We wanted to overlay the data quality checks, the business rules, all those good things, and then everything would be built off that data lake. That's where we found ourselves working with Snowflake’s AI Data Cloud.”

Taking a long-term view

Wood, who spoke with ITPro at the recent Snowflake Summit 2026 conference in San Francisco, says this process began two years ago, when RAM, which is part of the Rathbones investment group, was looking for a way to manage its information assets more effectively.

The shift to Snowflake is part of a broader digital transformation to support business growth. The organization’s assets under management grew quickly before the move to Snowflake. However, RAM was still using a portfolio management system that was customized for the wealth management element of the wider Rathbones group.

Fortuitously, a solution came from within the broader Rathbones group. The firm was in the first phase of its Snowflake deployment, and Wood suggested to senior executives that the technology could help his organization manage its data headache:

“We said, ‘Look, we can take advantage of this technology,” he adds. “We want to lead the way in terms of building out our core foundational data domains in a Snowflake environment.’”

Transformational stages

Stage one of the transformation project involved a point-to-point data share between the existing Charles River investment management solution and the Snowflake platform. Wood says this data-sharing process covered a trading view of the organization’s funds, such as securities bought and sold.

Stage two, meanwhile, involved building out RAM’s data store and the static reference information for its funds. Wood says this process allowed his team to build the Open Funds template, which external vendors use as a standard for consuming the organization’s data.

The success of this initial work meant senior executives could see further opportunities, with Wood adding: “Then we started to get into conversations where we were saying, ‘Okay, now we need historical fund performance, our quant risk calculations, what we call subscriptions and redemptions, and the cash flow in and out of our funds from clients.’”

Today, RAM has nine domain-related data sets established in its Snowflake data platform. These data sets cover a range of areas, including performance, risk, sustainability, and unstructured information, such as the decisions behind the firm’s investment activities.

Foundation for future success

Wood says the integrated data sources provide a foundation for change, including potentially embracing emerging technology. Work undertaken so far means his team can start exploring AI, including Snowflake’s agentic services. At the San Francisco event, Snowflake announced new features for CoWork, its personal agent for knowledge workers, and CoCo, its coding agent for developers and data engineers. Wood can see the agentic technology’s potential.

“When you combine all the information, you can start to do some powerful things,” he says.

“We're now in a scenario where we can say, ‘Looking over all this data, we can start to analyze the performance of our investment decisions and give product specialists new insights.’”

RAM’s agentic explorations are already underway. The organization has a test environment for CoCo and CoWork that’s running with millions of rows of data. “At this stage, the outputs look very decent, so it's a near-production environment,” Wood says of the explorations, before outlining other potential applications.

He adds: “The future direction is that you start to get into sales and distribution. The most valuable data in our CRM system today is the call notes written up after every meeting that say clients are interested in some funds and pulling away from others. No one could analyze that data until now, because, after you've had two or three calls with the client, the information disappears down the chain in Salesforce.

“Now we're looking at the idea of using agentic technologies to consider the long-term buying trends of clients. The salespeople know their clients, and they know what they're buying. But if we see the general trends, then that insight can go into a product cycle that makes us think, ‘Do we need to be looking at new funds, do we need to broaden our horizon? Are we at risk in certain areas?’”

Fuelling innovation

The work Wood’s team has undertaken means they can investigate native applications and emerging technologies with confidence, rather than focusing on point-to-point data shares with Snowflake. That investigatory work is crucial because, as a smaller business, RAM will never have a team of engineers to build out a big AI platform.

“That approach doesn't make any sense,” he says. “What does make sense is that we've got Snowflake technology that is central to our data strategy. Now, our work is about how we can find the tools that interplay with the platform, so we reduce the Frankenstein's monster of connectivity and integrations that can slow projects down.”

Wood reflects on the digital transformation program he’s overseen and says that, as with any financial services firm, the key challenge is ensuring exploratory projects are prioritized in an industry that often contends with a regulatory burden and technical debt. Sometimes, due to these intractable challenges, innovation gets stifled because of people and budget constraints. Wood says his organization has circumvented these issues.

“I think Snowflake, and how Rathbones operates, has allowed us to take control of our environment,” he says, referring to the split between the group implementation of the platform and his organization’s deployment. “There's a broad Snowflake environment, and then we've got a ring-fenced environment, with all our data sets, which means the implementation has been built in a way that allows more self-service capability.”

Wood suggests the key to long-term success will be staying on top of Snowflake’s product advances. For example, his team received buy-in for its CoWork and CoCo explorations by explaining how a trial of the agentic technologies could benefit the group.

“There are good ways to try and ensure that you get that prioritization if you need to,” he says.

“When you've got a real-world business case and value proposition that is going to materially benefit the business, versus just being a nice technology idea, the investment ultimately comes through.”

AI isn't replacing cybersecurity roles but it is changing them, and not always for the better, according to new research.

A study from ISC2 found that 65% of cybersecurity professionals who use AI in their roles are spending time deciding when to trust or act on AI-generated recommendations.

Nearly two-thirds (63%) said they often find themselves reviewing and validating AI outputs. While this is basic best practice from a safety perspective, these processes are wasting valuable time.

Regardless, the influx of AI tools within the profession has been welcomed by practitioners, according to the study.

More than half (53%) believe the technology is creating new entry-level opportunities, while 48% said AI makes them feel more optimistic about their long-term career prospects.

“AI is not replacing cybersecurity professionals; it is changing what the profession requires of them,” said ISC2 CEO Scott Beale.

“As AI takes on more repetitive tasks, as well as performing some complex cybersecurity analysis at speed and scale, cybersecurity roles are shifting toward higher-value work, from asking the right questions to validating findings, interpreting outputs and applying human judgment."

Beale noted that the use of AI is changing “how work is distributed across security teams”, meaning investment in areas such as governance, skills development, and validation practices is “essential”.

Too much time fixing problems

While nearly half of cybersecurity professionals reported that AI has reduced workplace stress, 32% said it has made it worse. A key factor here lies in the aforementioned validation and reviewing practices, the study noted.

Those experiencing higher levels of stress were significantly more likely to spend longer periods deciding when to trust AI-generated outputs and recommendations.

When AI-recommended actions lead to incorrect outcomes – which nine out of ten said had happened – half of the participants said their organization holds human decision-makers ultimately accountable.

Put simply, poor AI-related outcomes have a direct impact on wellbeing for cybersecurity practitioners when it’s their neck on the line.

Confusion over accountability and ownership of AI also adds to stress, the study noted. Nearly a quarter (21%) of respondents said accountability of AI-related issues varies depending on the severity.

Over-reliance is a worry

Other top concerns cited by ISC2 included over-reliance on AI, a recurring worry not just for cyber professionals but workers across a range of industries.

As ITPro reported in May, a study from GoTo warned over-reliance on the technology could erode key skills. Similar concerns have been highlighted in software development, particularly among entry-level workers entering the workforce.

62% of respondents identified this as a key concern in the ISC2 study while 56% also highlighted worries about reduced human judgement capabilities when it comes to business-critical decisions.

Foundational cybersecurity skills remain essential, according to ISC2, especially with AI in the mix. Notably, nearly two-thirds (62%) said they don't believe the technology has reduced the need for these skills, compared with just 26% who say it has.

FOLLOW US ON SOCIAL MEDIA

A group of current and former Meta employees is suing the company, claiming that it used AI to target those on medical or family leave for layoffs.

In May, Meta announced it was cutting around 8,000 staff, representing roughly 10% of its workforce. According to the lawsuit, the tech giant used AI systems to identify those set for redundancy.

These systems allegedly took into account keystroke monitoring data, AI token usage

“Meta did not assemble the termination list through the considered judgment of managers who knew the work,” court filings state.

“Instead, Meta used a constellation of internal artificial intelligence systems — including a system referred to internally as ‘Metamate,’ employee-trained ‘second-brain’ agents, keystroke- and activity-monitoring data, AI-token-usage dashboards, and algorithmically assisted performance ranking and calibration — to score, rank and select employees for inclusion on the list.”

Complainants allege this put employees on protected medical or family leave, or those whose output was reduced by a disability, at a disadvantage by penalizing them with reduced performance scores.

"The result was that employees who took protected leaves were disproportionately selected for layoff, based on scoring that not only failed to account for their protected leaves, but in effect penalized the employees for exercising their legal rights to these leaves."

In one example, an employee was laid off while on approved pre-birth pregnancy leave – the day before her waters broke, and just two days before she gave birth.

In another, a manager’s own performance review noted that his demotion followed his return from medical leave; he was put on the list sixteen days into a second medical leave.

The 26 plaintiffs claim that Meta has violated state-protected leave laws, the Family and Medical Leave Act, the Pregnancy Discrimination Act, and the Americans with Disabilities Act.

They're calling for a preliminary court ruling that would stop Meta from finalizing the layoffs while they pursue their ​claims.

“Once these separations are final, the harms are irreversible: employer-subsidized health coverage lost during pregnancy, postpartum recovery, and active medical treatment; time-bound leave rights extinguished; unvested equity forfeited; and immigration consequences triggered,” they said.

Plaintiffs are also seeking financial compensation that could include reinstatement, back pay, lost equity, benefits, and other damages.

AI in HR is a delicate balancing act

The use of AI systems in HR and recruitment has been a long-running point of contention, particularly with regard to the potential for bias or discrimination.

Workday, for example, is facing a class-action lawsuit amidst claims its AI software discriminated against job applicants. As ITPro reported in June, the company hit back at the claims, with a spokesperson insisting its AI solutions “don’t make hiring decisions”.

Ilia Kolochenko, founder of cybersecurity company ImmuniWeb and a lawyer practising in cybersecurity and data protection, noted that over-regulation of the use of AI in HR could cause long-term harm.

"With the current trend to restrict or even entirely ban AI in HR decision-making processes, most organizations will either conceal the use of AI or shift back to non-AI systems especially in those jurisdictions that have no GDPR-like protection against automated decision-making on human subjects," he said.

"Compared to AI-powered HR systems, their non-AI homologues are quite primitive, fail to consider the relevant context and often provide incorrect metrics or data,” Kolochenko added.

“For instance, a poor performance of a delivery truck driver will not be correlated with extreme summer heat or winter snowfalls, sudden family loss or simply a technical issue with the vehicle. Eventually, innocent persons are wrongly punished.”

ITPro approached Meta for comment, but did not receive a response by time of publication.

FOLLOW US ON SOCIAL MEDIA

European small and medium-sized businesses (SMBs) are bullish on generative AI, according to new research from SAS and IDC, and some are setting an example in how to nail adoption.

Analysis conducted by IDC on behalf of the data management firm shows SMBs across the region are executing AI deployments in a far more efficient manner to global counterparts.

In North America, for example, SMBs scored strongest in terms of planning and building, but many aren’t reaching full deployment.

This contrast suggests European organizations are making “stronger progress in operationalizing AI and embedding it into day-to-day operations”.

A key factor in European SMB successes lies in readiness, according to the report. IT leaders across the region are prioritizing areas such as governance before diving head long into adoption projects.

“Organizations treating governance as a foundation rather than an obstacle are often the ones best positioned to execute,” said John Carey, Senior Vice President of Global Channels at SAS.

“The findings suggest European SMBs are taking a more operational approach to AI adoption – focusing not just on experimentation, but on putting the right structures in place to scale AI effectively.”

Notably, Carey suggested that “stronger execution performance” among European SMBs may be due to regulatory considerations such as the EU AI Act.

Simply put, IT leaders at small businesses across the region are accelerating preparation to ensure compliance with the legislation.

It’s perhaps no surprise then that governance, risk, and compliance for AI has emerged as the top priority for SMB leaders, cited by 26%.

Progress on this front is easier said than done, however. The study noted that uncertainty is rife with regard to compliance, risk management, and security.

Nearly one-quarter (24%) identified this as their biggest execution barrier with AI adoption.

Still a long way to go

Despite positive signs for European SMBs, on a global scale the pace of AI adoption is still slow. SAS noted that many are “still struggling to move from experimentation to meaningful business impact”.

Nearly three-quarters (70%) of SMBs worldwide either remain in ‘experimental’ or ‘opportunistic’ stages of AI maturity, for example. Similarly, only 9% have fully embedded AI into daily operations or decision making.

Slow progress in AI maturity is, at least in part, due to traditional data-related problems such as silos and visibility. Nearly half (45%) of SMB leaders said their data remains “scattered across systems with no clear ownership”.

A similar number (46%) said AI tools are often still used in isolated environments across the business, preventing teams from aligning workflows.

Notably, 90% of those in experimental phases report having no formal AI strategy in place, which is impeding progress for IT leaders.

“To actually make something of their AI strategy, SMBs need to move from disconnected pilots to true alignments of their data, people, and resources,” said Daniel-Zoe Jimenez, VP of research at IDC.

“Experimenting with the technology is one thing. Deploying it strategically and sustainably is quite another.”

FOLLOW US ON SOCIAL MEDIA

AI continues to dominate conversations across the technology industry. Every week seems to bring a new model, platform, or product announcement, alongside predictions about how quickly AI will transform the way organizations operate.

For channel partners, the challenge is deciding where to focus. Customers are looking for guidance, but keeping up with every new development isn't a realistic strategy for most businesses.

What many organizations need right now is more practical. For many customers, the challenge is no longer understanding AI's potential but addressing the data, integration, and operational hurdles that stand in the way of adoption. Information is often spread across disconnected systems, while growing attention to AI costs is increasing demand for more disciplined approaches to deployment and governance.

They are trying to work out how AI fits into their existing technology environment, how it can support day-to-day operations, and how to deliver measurable results. That's where many customers are looking for support - and where partners can have the greatest impact.

Why promising AI projects get stuck

Over the last few years, organizations have invested heavily in AI pilots and proof-of-concept projects. Many have demonstrated what is possible, but moving from experimentation into wider business use has proven more difficult.

The obstacles are rarely limited to the AI technology itself. Firms often face challenges integrating AI into existing environments, governance requirements continue to evolve, and teams can struggle to connect AI initiatives to clear business priorities. Even when a pilot is successful, scaling it across different teams, processes, and systems introduces a new set of challenges.

Customers need support identifying where AI can make a meaningful difference and how it fits into existing workflows. Just as importantly, they need help addressing the operational issues that can slow adoption long after the pilot phase has ended.

All roads lead to data

For many organizations, progress with AI is constrained by their ability to make data accessible, trusted and usable across the business. Many have accumulated years of information across different applications, cloud environments and departments.

Making that data accessible, reliable and usable remains one of the biggest barriers to successful AI adoption. Half (49%) of UK organizations lack the internal skills needed to integrate AI with existing analytics and business intelligence systems, according to our research. While 37% say gaps in real-time data integration are a major obstacle.

Without a strong data foundation, organizations will struggle to trust AI outputs or apply them consistently across the business.

For partners, this creates opportunities that extend beyond a single deployment. Helping customers improve data quality, connect systems and establish effective governance addresses challenges that continue long after an AI project goes live.

As organizations roll out AI across more areas of the business, these foundations become even more important. This creates ongoing demand for partners that can help customers manage complex data estates, link disparate systems and put the right policies and processes in place.

Complexity isn’t going away

Alongside data challenges, organizations are also managing increasingly complicated technology environments. Few businesses operate within a single vendor ecosystem. Most are working across multiple cloud providers, applications, analytics platforms and AI tools, many of which have been introduced at different stages.

Customers want the flexibility to adopt new technologies without disrupting existing investments. They also want confidence that systems can work together effectively and that today’s decisions will not create unnecessary constraints in the future.

As AI projects move beyond the pilot stage and into wider deployment, organizations will increasingly need support connecting technologies, improving interoperability and reducing operational complexity. Partners that can provide that expertise are likely to become trusted advisors.

Building services customers will continue to need

As AI adoption progresses, some of the strongest opportunities for partners sit in areas where customers will need ongoing support.

Workflow automation is a good example. Many organizations continue to rely on manual processes that slow decision-making, create inefficiencies or make information harder to access. AI can help address these issues, but success depends on understanding how technology, processes and people work together.

The same applies to services focused on AI readiness, data quality, governance and integration, for which there is already demand. UK businesses and IT leaders believe better data integration and analytics would help demonstrate AI's value to stakeholders, while more than half want greater visibility into how AI models reach decisions, our research found.

Organizations are also becoming more disciplined in how they evaluate AI investments. Beyond model performance, there is growing focus on managing operational costs, reducing unnecessary processing, and ensuring that AI systems are working from relevant, trusted data. Strong data practices not only improve outcomes but can also help organizations use AI more efficiently as deployments scale.

These engagements help customers address immediate challenges while creating a stronger foundation for future AI initiatives. They also lend themselves to repeatable service offerings that can be applied across different customers facing similar problems.

The opportunity is already here

For many channel partners, the biggest AI opportunity lies in helping organizations move beyond experimentation and into everyday use.

Many organizations already have the technology required to move forward. What they often need is a clearer path to adoption across the business. Partners that can provide that guidance will be well positioned to strengthen customer relationships and support the next phase of AI deployment.

Sovereign AI has quickly moved from policy language into boardroom planning. For CIOs, the appeal is easy to understand: more control over where data goes, which systems can access it, and how far an organization depends on overseas providers for increasingly critical AI workloads.

In 2026, the pressure is only growing. Governments want national AI capacity, regulators want clearer accountability, and enterprises want to know whether their data, models, and infrastructure are exposed to legal or operational risks that they cannot easily see.

In that context, regional hosting, sovereign cloud services, and local AI infrastructure can all look like a sensible response.

Gartner has predicted that 35% of countries will be locked into region-specific AI platforms by 2027, up from 5% in 2026, underlining how quickly sovereignty is becoming a question of procurement, platform choice, and long-term flexibility.

But sovereignty is not a single switch that makes an AI deployment safer, simpler, or more compliant, and can actually narrow model choice, add procurement friction, raise costs, complicate integration, and create fresh dependencies.

The real question for IT leaders is what level of control each workload actually needs, what the organization is prepared to give up in return, and whether a sovereign approach reduces risk or simply moves it somewhere less obvious, not whether sovereign AI is “good or bad”.

To help understand these trade-offs, ITPro spoke to Forrester senior analyst Dario Maisto about what enterprises really mean when they talk about “sovereign AI”, where local control can reduce risk, and where it can create fresh complexity.

What enterprises really mean by “sovereign AI”

For many businesses, sovereign AI still starts with a fairly narrow concern: keeping data in the right place, which might mean running inference in a specific region, storing prompts and outputs locally, or making sure sensitive data is processed under a particular legal regime.

While these are important controls, especially for regulated sectors, they are only one part of the sovereignty picture.

Maisto says most enterprise projects have not yet reached the point where organizations are wrestling with sovereign AI at full production scale. “Clients' journeys are not that advanced in AI deployments that they can worry about the depth of sovereign AI at scale for production environments,” he says. “They have mostly data residency concerns.”

Maisto’s insight explains why the term can become slippery. A vendor might describe an AI service as “sovereign” because the data is hosted in-country; a public sector buyer might use the same term to mean local legal accountability or domestic infrastructure; and so on.

Distinctions like this are important because AI does not sit neatly in one place. A single deployment can involve cloud infrastructure, foundation models, APIs, orchestration tools, identity systems, logging, monitoring, and a lot more besides.

Once AI agents – perhaps 2026’s buzziest trend – enter the picture, the stack becomes even harder to contain, as systems start pulling from enterprise data sources and triggering actions across multiple applications.

Why local hosting is not the same as control

The first trap is assuming that sovereignty begins and ends with location. Keeping data in a specific country or region can be important, but local hosting does not automatically decide who controls the service, which laws apply, or who can access the underlying systems.

Maisto is blunt on this point: “Local hosting does not protect workloads and data with regard to sovereignty concerns. This is where organizations overestimate the potential of local hosting and in-region infrastructure to improve their digital sovereignty posture.”

“If the infrastructure and the tools are owned by a third party operating under a different jurisdiction, the sovereignty risk is not mitigated,” he says.

None of these makes regional hosting pointless. It can still help with latency, regulatory alignment, audit requirements, and internal assurance, and can also reduce the number of cross-border transfers and make it easier to show that sensitive workloads are being handled within a defined legal environment.

The problem comes when residency is treated as a substitute for sovereignty. For CIOs, the due diligence needs to go beyond the region on the invoice and into the architecture behind the service.

Sovereignty can limit choice

The next cost to businesses is flexibility. AI buyers are used to a market that moves quickly (perhaps too quickly), with new models, tools, and managed services appearing every few months or even weeks.

A sovereign AI strategy can slow that down, especially if an organization has to use approved regions, certified providers, local infrastructure, or a smaller set of compliant services, alongside additional procurement, legal, or regulatory scrutiny.

While that trade-off may be perfectly reasonable for the right workload, it still needs to be visible. A government department handling citizen data should not treat model access like a marketing team testing copy variations, and a bank, healthcare provider, or critical infrastructure operator may decide that tighter controls matter more than immediate access to the newest frontier model.

But a sovereign deployment may mean fewer models, less access to specialist AI services, slower feature rollouts, or more integration work for tools that would otherwise be available through a major cloud platform.

That risk is already visible in agentic AI, where ITPro has reported that many UK companies are moving ahead with deployments despite gaps in governance and visibility over where data is stored, processed, and accessed.

Maisto argues this is where buyers can underestimate the knock-on effects. “Organizations mostly tackle this theme from a data residency and inference location perspective, although problems like agents' sovereignty could be more important, and the solutions look very immature as of now in the market,” he says.

“Integration is another underestimated aspect of agentic AI as agents are pervasive and have the potential to increase vendor lock-in with non-sovereign vendors.”

As AI becomes more embedded in enterprise systems, sovereignty becomes harder to separate from day-to-day architecture. The key question is how deeply it connects to the business, and whether those connections can still be governed, audited, or replaced.

Skills and procurement can slow everything down

Even when the case for sovereign AI is clear, delivery can be harder than the strategy suggests. An organization still needs people who can assess suppliers, design the architecture, check operational controls, and so on, and these skills are already scarce in mainstream AI projects, before sovereignty requirements narrow the pool further.

Talent may become one of the biggest constraints, according to Maisto. “According to our forecast, [the] tech workforce is the only sovereignty index that is going to decrease in the next five years,” he adds.

“The more specialized the skills, the less the chance to have the right talent with the needed sovereignty requirements at scale. With an outlook to the future, skills from a sovereign pool of talent would be the most relevant component.”

Procurement adds another layer of friction.

Sovereign AI buyers may need to test where data is stored, how support access works, and many other features of the wider operational chain. Most of the time, the process is likely to be slower than buying a standard AI service from an existing cloud marketplace.

For CIOs, this creates a now-familiar tension: The business wants access to AI quickly, while security, legal, and compliance teams need confidence that the deployment will not create exposure later.

Sovereign AI can reduce some risks, but only if the organization has the skills and procurement discipline to define what “sovereign” means before it buys.

Should companies prioritize sovereign AI?

The safest approach is to treat sovereign AI as a design choice with a defined purpose.

Maisto says Forrester uses a “Minimum Viable Sovereignty Model Decision Framework” to help technology leaders weigh “compliance requirements, risk appetite, budget, tech and business requirements, and available sovereign products and services.”

He adds that they should assess “the tradeoff between sovereignty and functionality, looking at the viability, feasibility and desirability of a sovereign solution.”

Any assessment should include the practical value of sovereignty, the compromises it introduces, and the maturity of the products available. “Not all vendors are scoring equally on AI capabilities and even less so when it comes to sovereign AI capabilities,” says Maisto.

For CIOs, the aim should be proportional control. Some workloads will justify strict sovereignty requirements because the data, operational risk, or public accountability demands it; others may be better served by strong governance, clear deployment controls, and encryption.

The danger comes when enterprises buy sovereign AI too vaguely, without defining which risks they are trying to reduce, which freedoms they are willing to give up, and what they will need back if the strategy changes.

Companies using AI should be wary about losing control of their data – and the risk of AI developers making use of that knowledge.

That’s according to Microsoft CEO Satya Nadella, who in a recent blog post warned many AI users are "paying twice" thanks to what he calls the "reverse information paradox”.

This is a process through which AI providers, particularly frontier labs, get access to proprietary data about their own customers. Nadella said the trend represents a huge risk for enterprises, and called for protections akin to patents.

The critique is intriguing as Microsoft itself is an AI company, offering plenty of AI-driven products to customers and cramming AI features into its software. Beyond that, Microsoft was an early funder of OpenAI, though that relationship has weakened of late.

Nadella pointed to economist Kenneth Arrow's information paradox, in which the seller of data or knowledge risks giving it away in order to prove it's worth selling. He noted that AI has created the reverse problem, in which the buyer gives away knowledge in order to use the product purchased.

"You essentially pay for intelligence twice, once with money, and again with something even more valuable: the proprietary knowledge you must reveal to make that intelligence useful," he noted. "The better you want the model to perform, the more of that knowledge you have to feed it!"

"Over time, the information asymmetry becomes increasingly skewed. The seller learns more and more about you as you use what you purchased, while you learn very little about what the seller is learning in return."

The ‘AI exhaust’

This concern isn't just about uploading corporate data to systems, or accidentally including proprietary data in a prompt, though those are both concerns. Instead, Nadella said every interaction with AI inherently includes information that could be useful.

"Models learn from 'exhaust,' the prompts people write, the tools agents use, and especially the corrections people make when the model is wrong," he wrote.

"Every correction is distilled into institutional know-how. It’s the kind of knowledge a competitor could never buy, and the kind that leaks almost imperceptibly: trace by trace, correction by correction, eval by eval."

Ironically, Nadella said it was necessary for the "great innovation" of allowing model developers to use public data – some of them face lawsuits for hoovering up copyrighted data to train their systems.

When it comes to business data, providers should share anything learned with customers. Very few actually do this, however.

"If learning flows in only one direction, economic value converges toward the owners of the learning infrastructure rather than the creators of the knowledge itself," he said. "Therefore, it’s imperative that we distribute the learning infrastructure to every firm so that they can control their own learning loop."

Nadella's tips on how to protect your company from AI

Nadella said the existing setup requires a protection system on par with patents, but also advised companies to set a "trust boundary" by considering a few key aspects – some of which may be easier by simply switching to open source AI.

He suggested companies should control their own "evals", or evaluations of the AI system, because that reveals what looks "good" to the organization, and keep ownership of decisions, feedbacks, and other outputs for their own use.

Beyond that, companies should build capability with AI via their own learning environments where models can learn using real workflows without exposing corporate data.

Improving choice can be achieved by decoupling the orchestration layer from any single model, enabling the ability to switch to another model if one is withdrawn. This can also help organizations cut costs by choosing the right model based on their individual needs.

Lastly, he said to "compound" those four ideas to "create your own continuous learning loop".

"In other words, a company should be able to use a model without giving up the knowledge that makes it unique," he added.

FOLLOW US ON SOCIAL MEDIA

Palo Alto Networks CEO Nikesh Arora has issued a stark warning to workers reluctant to adapt to generative AI: they face a “Darwinian moment”.

Speaking during a recent appearance on the 20VC podcast, Arora suggested a significant portion of workers globally lack necessary AI skills, which raises questions about how leaders can implement change and build workforces capable of meeting future demands.

“The challenge right now is 90% of enterprise employees are not AI savvy. They’re not,” he said.

“They have to learn. I can’t send them to university. There’s no course you can take in school anywhere. They have to be able to learn on their own. I think we’re back to a Darwinian moment where everybody has to figure out who’s really good.”

In some cases, building an AI savvy workforce has prompted some drastic action by executives. Nikesh pointed to Coinbase CEO Brian Armstrong’s approach of penalizing workers who refused to adapt or embrace the technology.

During a podcast appearance last year, Armstrong admitted to firing workers who refused to engage with the technology after paying for enterprise licenses for GitHub Copilot and Cursor.

Other organizations, such as Jack Dorsey’s Block, reportedly introduced AI mandates for workers. Both companies laid off staff this year amidst claims that the technology is changing how they operate.

“You’ve seen people like Brian Armstrong and Jack Dorsey go out and say, ‘I’m going to decimate my organization, and I’m going to start building from scratch’ and they’ve gone to some version of 30, 40% fewer people because they figured out there is no redemption,” Arora said.

As ITPro reported last year, punitive measures to spur AI adoption in the enterprise is a sure fire way to create workforce pushback.

It’s a similar dynamic to the return to office (RTO) mandates that caused widespread upheaval at a range of big tech firms in recent years. Encourage, but don’t push, or else it could come back to bite you.

Palo Alto Networks’ approach leans toward a gradual shift, Arora noted. The company, which has roughly 20,000 staff, has a “natural attrition of 2% a month. The focus now is on replacing these staff with people who are indeed AI-savvy.

Elsewhere, the company actively seeks out AI talent from events such as hackathons, Arora revealed. These are lucrative talent pools that the company can draw from to acquire staff.

“We hire from hackathons,” he said. “Give me 12 months, I’ll have sort of transformed 20, 25% of my team. Give me three years, I’ll hopefully have enough AI-savvy people working at Palo Alto.”

Top-down encouragement

Building an AI-savvy workforce also requires accountability on the part of leadership, Arora said. Delivering change requires leaders across an array of functions to have ambition and actively engage with the technology.

Arora has regular conversations with leadership figures aimed at establishing their progress with AI, allowing them to showcase potential wins.

“You have to make sure your leaders are ambitious. You have to make sure they're competitive. You have to make sure they want to win. You have to make sure that they have a learning mindset,” he said.

“When they watch their peers around them do cool [stuff], they want to show up and do cool [stuff] the next time. So for me, it's getting 14 people together and saying, ‘Hey, Harry, tell me today, what have you done for AI the last three days since I last talked to you in your organization, and whatever motivates you?”

This gives Arora a clear understanding of the direction some leaders are going in with the technology. Moreover, it appears to act as a springboard for motivating others across the company.

“It creates a little bit of Darwinian competition amongst them. It creates this urge to go embrace this new technology, and I think hopefully I get 14 people fully motivated, and then they go do that with the next set of people because I need to transform from the top down, not from the bottom up on this topic.”

FOLLOW US ON SOCIAL MEDIA

Digital twins have been a key tool for organisations to create virtual replicas of operating environments. From transportation to manufacturing and oil & gas, they help simulate performance and prepare for 'what-if scenarios'. But they're evolving.

On this week's episode, Bobby talks to ITPro's news and analysis editor, Ross Kelly, to ask what exactly a digital twin is and how they are evolving since the arrival of generative AI.

The term 'digital twin' is even taking on different meanings; in some cases it's not just a virtual replica of a factory floor, for example. We are now seeing digital twins of people, with Forrester describing them as 'Digital Doubles'. Gartner also predicts that some organisations will begin creating 'Digital Twins of Customers' as a way to simulate how customers might respond to specific scenarios.

Highlights

"We covered this around two years ago on the website: 'AI and digital twins are a match made in heaven'. AI within the context of a digital twin can help improve visualization of real-world dynamics that you're trying to replicate, make sense of the data that you're gathering here, and reduce workloads. For the people that would have traditionally, taken all this on board and been operating and leading the charge on this front."

"I think a great example of AI being used in digital twins at the moment is in Dubai. They launched a digital twin of the entire city, 190-5000 buildings, hundreds of 1000s of infrastructure assets, hundreds of 1000s of public facilities as well. Again, this is part of Dubai's broader digital transformation strategy, but fundamentally this comes down to urban planning and just making it easier, allowing them to create a comprehensive map of everything there."

"Over the last year or two, we've heard chatter about digital doubles or digital twins of workers as well. I think we're going down the rabbit hole here, so to speak. But Forrester's spoken about this quite frequently. The idea of creating a digital double of a worker that's based on all of the information available on that worker internally, their skill sets, what particular unit of the business they're in, and what role they have. There was a fascinating article on the BBC in April this year around Digital Richard, which is essentially an AI, a digital twin of an individual worker. Here, it's not so much a chat bot."

Links

• Are AI digital twins a match made in heaven?
• Does your business need a digital twin?

Open source can't catch a break. As the world of software development marches forward with new tools and capabilities expanding productivity – an evolution driven predominantly by AI – the community endures significant headwinds.

"In the age of AI-driven security threats, protecting customer data has to come first," wrote Bailey Pumfleet, co-founder and CEO of scheduling software maker Cal.com, in April.

After five years as "open source champions", the company announced it would go "closed source". Cal.com is far from the only example, with several organizations and projects including Tailwind, curl, Jazzband, Godot – and even the U.K. National Health Service (NHS) – also struggling in the wake of AI.

Tension has always plagued open source, with concerns around funding, infrastructure, and even expectations management, negating any meaningful green shoots. The threat has even been described as "existential", but the community has nevertheless survived and thrived, celebrating incredible adoption rates in recent years. But things feel different. AI poses an existential threat in many areas — but will it continue to hack away at the beleaguered open source community, or is there a viable path forward for the movement?

Open source is battling AI-centric headwinds

"In the past, exploiting an application required a highly skilled hacker with years of experience and a significant investment of time to find and exploit vulnerabilities," wrote Cal.com's Pumfleet in the blog post. The reality is that humans don’t have the time, attention, or patience to find everything. Today, AI can be pointed at an open source codebase and systematically scan it for vulnerabilities."

Security is just one aspect in an increasingly fraught dynamic. Tailwind, the organization behind a popular CSS framework that web developers incorporate into their projects, announced on 7 January it had slashed its four-person dev team to just one. The reason, CEO Adam Wathan cited, was "the brutal impact AI has had"; web traffic to documentation – which is the only way people can find out about its commercial products – was down 40% from early 2023.

There are also examples of projects struggling to cope with an onslaught of low-quality contributions. Take Godot, the open source game engine that's drowning in AI slop code pull requests (PRs), according to one of the primary maintainers, Rémi Verschelde, who described this as "increasingly draining and demoralizing".

The Jazzband collective, a Python project ecosystem, was sunset this year after ten years of activity due to the "slopocalypse" with floods of PRs and AI-generated spam rendering "Jazzband’s model of open membership and shared push access untenable".

There are plenty of other issues to contend with. They may include the fact that using advanced AI tools may be gated on the need to spend money, and that it's unclear whether you're speaking with a human or an AI agent at any given time.

How open source projects are coping with AI

Amanda Brock, CEO of OpenUK, tells ITPro that the industry is still grappling with AI as a novel force and different projects are handling it in different ways – with some handling it much better than others. "For some projects, they have not been able to manage the scale of it. And for some small companies, they have said they've had to close," she says, but added this isn't a universal experience, with others managing to get a grip on the headwinds.

"I'm skeptical about their business plan," Brock added on Tailwind, "and I could be wrong, and I'm not an authority on this in terms of each company's business and whether they were doing well enough. But I'm a bit skeptical when many are surviving about the few that are closing, and I don't know if that's the most vulnerable or the ones without the right business structures or teams."

However, Brock states the challenges are very real and unlike much else the community has experienced. For example: "When AI comes to Wikipedia, it not only comes at a huge scale by volume of eyes on the site or the pages, it looks at every page, and it does it in an instant. And the overwhelm is huge. And that's the equivalent of what open source projects feel when their repos are scraped; when they suddenly have this inbound volume from AI."

An example of a project that's fared better in wrestling with AI is Homebrew, the package manager. Its project leader Mike McQuaid tells ITPro Homebrew's response was to fight fire with fire. "We have had an increase in low-effort activity, but we respond with low effort," he says. "Our bots automatically close issues, we’ll close without review, we don’t dignify them with a response, et cetera."

McQuaid adds that, despite some notable examples, it's overstated that many projects are going closed source or winding down, and it's not representative of the wider experience. He says projects weather the storm "the same way we always have," with one measure including prioritizing maintainers' time, effort, and enjoyment over contributors, and prioritizing contributors over users. Responding to rudeness is also met with low effort, no effort, or blocking. He also suggested leaning very hard onto guardrails.

Resolving the fate of open source

McQuaid says the notion that AI could lead to the end of open source is "far too dramatic" and that there are plenty of positives to enjoy in a grand trade-off, despite there being an element of entering the unknown. These positive improvements include the way that AI allows some people to go much faster, that there are plenty of free AI tools available, and that many of these can help with code review, fixing bugs and triaging.

"It isn’t making huge negative changes without any positive remediations," he explains. "It’s just resetting people’s expectations of what 'working on open source' might be like for them. Some people won’t enjoy it any more. Many people equally are contributing who didn’t or wouldn’t before."

Despite many positive steps taken in the open source world over the last decade, Brock dwells in a sense of pessimism – but not entirely because of the immediate effects of AI. "I have been very pessimistic in some ways for a long time," she says, "because after lockdown everybody came out seeming to think that 'we'd won'." And what we'd won was, we've got a scale of adoption — but that scale of adoption wasn't matched by a scale of understanding, or funding.

"My worry was that you were going to see it, go full circle and end up back in proprietary because of exactly this kind of thing. I did not imagine AI, but I could see that things might happen, that meant that we were just overwhelmed because we got into a position where people expected an SLA-type delivery and support for free because the code was free."

Building on open source's legacy

"If it hadn't been AI, it would have been something else," Brock reiterates, saying the challenges have been piling up "at a time when people are reeling" one after another in the last few years.

"We've just had a decade since we really saw all this adoption start. We're a small group of experts [and scaling from] the small to the many hasn't worked."

Brock wants to see more gatekeeping, because "good projects have always gatekept". She adds: "There is this sense in the wider world that open source has always been a wild west, and that anybody can contribute – and that's just not the case."

Beyond that, she sees hope in models like the German Sovereign Tech Agency, which brings together dozens of maintainers into standards development. There are calls in the U.K. for a similar system, with a foundation in the model of the Linux Foundation, or China's OpenAtom, that brings together expertise at a national level to work on intellectual property (IP), managing GitHub repos, and other key elements, for public sector open source.

By professionalizing the industry, however, you run the risk of losing projects when things go wrong. CHAOSS, a Linux Foundation project that measures open source health, is an example of a project in dire straits, having just lost its funding. Former director of data science Dawn Foster left her role in March, and the project has returned to the community.

But, Brock says, "it's hard to reignite the volunteers" when they see funded people doing the work. "So it all has to be done in a very careful, measured, and joined-up way across borders," she explains.

When it comes to the future, Brock remains adamant that urgent action is needed or open source will be consigned to history. "We're already seeing eight companies controlling the AI landscape," she says.

"If we allow open source to fail, the only organizations in the world that will be able to manage that are some of those big tech ones that will already have it in place. So I don't think it's in the human and public interest to allow open source to fail."

Accenture and Google Cloud have announced a new partnership aimed at driving AI adoption rates for mid-market firms amid sluggish deployment progress.

As part of the scheme, the duo will provide firms with a suite of six industry-specific agentic AI solutions designed to help push projects from pilot to production.

These solutions cover intelligence and growth, customer experience, cybersecurity, business operations, industry solutions, and workforce enablement.

"The companies that will define the next decade aren't waiting — they're building,” said Rajendra Prasad, technology reinvention engine lead at Accenture.

“Accenture Edge offerings built with Google Cloud technology help mid-market organizations do exactly that. They can deploy solutions in weeks and get measurable outcomes at the scale, budget and speed that they need to grow."

The collaboration will see Google Cloud provide the underpinning infrastructure and AI solutions to support organizations, including the Gemini Enterprise app, Gemini Enterprise Agent platform, and Agentic Data Cloud.

Accenture, meanwhile, is set to provide forward deployed engineers (FDEs) to offer guidance and technical support for participating firms.

Forward deployed engineers are in vogue

The move by the duo comes amidst a sharpened focus on driving enterprise adoption of AI and agents. The use of FDEs, in particular, has taken off as providers look to embed specialists within customer teams to support projects.

Last week, Amazon Web Services (AWS) and Microsoft both announced plans to invest heavily in FDE-related efforts, with the aim of hiring thousands of engineers in the coming years.

As ITPro reported, FDEs could become a key growth area for the industry moving forward, with big tech providers providing more bespoke support for customers.

Kevin Ichhpurani, president of Google Cloud’s global partner ecosystem, said the scheme will provide businesses with the “full power” of the hyperscaler’s product portfolio.

“We’re seeing tremendous demand as mid-market enterprises adopt AI agents to fundamentally reinvent their business workflows," Ichhpurani said.

"The launch of Accenture Edge brings the full power of Google Cloud’s entire portfolio including enterprise AI, our Agentic Data Cloud and AI Threat Defense directly to this sector. Together, we’re enabling mid-market companies to confidently scale AI across their organizations for growth.”

Driving mid-market adoption

According to Accenture, mid-market firms – or those with revenues of between $300 million and $3 billion – have largely been locked out of large-scale AI transformation due to complexity and integration barriers.

A recent study from Klarus highlighted the significant challenges faced by mid-market enterprises on this front. While nearly three-quarters (73%) have deployed AI solutions, around 90% of projects remain stuck or stalled in the pilot stage.

Although up to 94% of leaders feel confident about AI deployment, lack of expertise and governance concerns are causing projects to fail.

Mid-market firms aren’t alone in AI deployment challenges, however. Research from MIT last year found around 90% of all generative AI pilots fail, while similar research from Gartner warned up to 40% of agentic AI adoption programs are expected to fail.

These organizations are in a prime position to fully capitalize on the technology, however. Klarus CTO Alper Gunaydin said mid-market firms have the advantage of agility compared to larger competitors.

“Mid-market companies have a real advantage because they can often move fast, particularly when it comes to technology transformation. We see this agility in action when companies are turning to AI and automation to address productivity and accelerate growth," Gunaydin commented.

"However, our research shows that too many pilots stall because companies lack AI expertise, quality data and effective governance. Making that agility count requires clear priorities, strong foundations and access to senior expertise, all of which will help translate investment into tangible business outcomes and unlock growth without increasing the cost base.”

FOLLOW US ON SOCIAL MEDIA

Stronger powers could be needed to regulate the use of AI in financial services as consumers flock to the technology for advice, according to the Financial Conduct Authority (FCA).

Following an investigation into the technology and its impact on consumer finance activities, the regulator has recommended a formal review into how to regulate the use of general-purpose LLMs across the industry.

The FCA report – known as the Mills Review after its author – noted that companies and consumers are increasingly delegating decisions about finances to AI and AI-powered systems.

A survey by the regulator found that one-in-five adults were already open to the idea of general-purpose AI tools – such as Claude, ChatGPT, or Gemini – making financial decisions on their behalf, in particular around debt advice, pensions, and investments.

While that could help reduce existing challenges such as "advice gaps" and friction around switching services, the FCA warned about risks including fraud and scams, as well as disrupting market structure and competition.

"AI offers a once-in-a-generation chance to close the information asymmetries and frictions that have long left people making poor financial decisions," said FCA executive director and report author Sheldon Mills in the forward to the review.

"The right spur, in retail financial services, is ensuring consumers can make healthy ones; regulation, whether supportive or restrictive, should serve that outcome."

The FCA noted that many consumers may not be aware that they have no formal recourse if something goes wrong, and said some assume they receive equal protection akin to traditional sources of advice.

Emma Banymandhub, CEO of The Payments Association, agreed that the gap in understanding could cause issues and urged caution on the part of consumers.

"Consumers may be increasingly comfortable using AI agents for routine tasks such as weekly shopping, but AI-driven savings and investment decisions present a very different set of challenges," Banymandhub commented.

"While AI can increasingly explain investment concepts and analyse financial information, personalised investment recommendations remain subject to important regulatory constraints."

AI gains traction in financial services

The financial services sector has rapidly emerged as one of the key growth spaces in terms of the use of AI, with a host of major providers across the UK ramping up adoption of the technology.

As ITPro previously reported, high street lenders such as Nationwide, Lloyds Banking Group, and Yorkshire Building Society have all made significant strides on this front over the last six months.

A parliamentary inquiry into the use of AI in financial services, published in January 2026, found that the sector “substantially outpaces” others with regard to AI adoption.

Indeed, around 75% of UK-based financial services firms are now using the technology, with insurers and large banks among the most aggressive in their pursuit of AI adoption.

Running parallel to this, the use of AI by consumers is also surging, according to research from Lloyds Banking Group. The firm’s 2025 Consumer Digital Index found that AI has “rapidly become a financial tool for millions across the UK".

56% of adults – equivalent to around 28 million people – revealed they’d used AI over the preceding 12 months for financial advice. ChatGPT, for example, was referenced as the most popular platform in this regard, used by six-in-10 consumers.

What the Mills Review recommends

With this in mind, the Mills Review recommended that the existing "regulatory perimeter" needs to be secured and adapted to take in AI's impact on retail financial services – and that should come via a review within the next six months into how AI is affecting the market.

"The review should examine how consumers use AI including general purpose LLM tools for personal financial management across savings, investments, pensions, mortgages and debt management, and the implications for competition, innovation and growth," the Mills Review said.

"It should examine the risks of consumer harm, including how far its usage has or will move along the autonomy spectrum, and any impacts on market integrity and the potential for regulatory arbitrage."

Based on that review's guidance, the FCA could tweak regulation as necessary, the report said. Beyond that, the review called for the FCA to monitor for evidence of harm and new consumer models, engage with providers for better insight into changes, and be ready with intervention tools and mechanisms as necessary.

Frontier model monitoring in finance

In the longer term, the Mills Review called for the FCA to keep an eye on frontier model capabilities and AI adoption, considering its impact on its regulatory work, in particular where use of AI falls outside of existing protections and once AI agents start taking more action on behalf of consumers.

The review also called for stronger powers for the FCA so it can look at these issues more widely.

"As is clear in the report, we need to keep pace with a rapidly changing environment and the principles-based, outcomes focussed approach we’ve taken on AI – relying on the Consumer Duty and Senior Managers Regime – has been critical to us doing so," said Ashley Alder, chair of the FCA.

"The recommendations build on work the FCA has been doing – not least allowing firms to test their use of AI with us – and our own use of AI to be a smarter regulator, more efficient and effective."

Banymandhub added that walking that balance between enabling AI and protecting consumers and companies was key.

"The FCA’s Mills Review reinforces that firms should treat agentic AI as an accountability and governance issue now, while providing greater confidence to innovate responsibly as AI adoption accelerates," she said.

"AI has enormous potential for financial services, but realising that potential will depend on strong governance, clear accountability and maintaining consumer trust."

FOLLOW US ON SOCIAL MEDIA

A security firm has spotted what it claims is the first documented case of a ransomware operation run entirely by a large language model.

The Sysdig Threat Research Team said the operator, dubbed JadePuffer, is the first agentic threat actor, describing it as using a known flaw in AI app builder Langflow to gain access to credentials and other key data.

Thereafter, researchers noted it took over a production database and encrypted it for extortion purposes.

"JadePuffer is a warning sign," Michael Clark, Sysdig’s director of threat research, said in a blog post.

"It’s a marker of where extortion tradecraft is heading. An autonomous agent reasoned about its targets, harvested and reused credentials, moved laterally, established persistence, and destroyed a database, narrating its own intent the entire way."

Clark has clarified that though the attack operation was run by an AI, the attack was still organized by a human who set up the infrastructure, found the initial credentials to break in, and chose a victim. But the rest of the attack was managed by the LLM itself.

Alarming attack

Clark noted that JadePuffer's payloads were "self narrating", containing detailed notes that a human wouldn't bother to write but an LLM generates innately about why each step was taken, including prioritization of targets. That narration data could prove useful for security teams looking to defend against such attacks, Clark added.

"The operation also adapted in real time, retrying failed steps within refined parameters," Clark added. "In one sequence, it went from a failed login to a working fix in 31 seconds."

That is perhaps the most alarming aspect of the incident, according to Roey Eliyahu, CEO and co-founder of Salt Security.

"A human attacker who fails an initial payload waits, reassesses, consults, and tries again on a different timeline," Eliyahu said. "An agent that fails a payload corrects and retries in under a minute. That compression of the attack cycle means the window between first detection signal and material damage is now measured in seconds, not hours."

The JadePuffer system even wrote a ransom note complete with Bitcoin address and Proton email contact, Clark noted, though the former appears to be a wallet address frequently used as an example in explainer text online.

That’s either a coincidence, said Clark, or a hallucination by the LLM due to the frequency of that address online, and therefore used in training data.

Clark also noted that the encryption key was generated and essentially random, so the victim would not be able to decrypt — even if they paid the ransom. The victim organization wasn't disclosed.

Warning about the future of security

While JadePuffer is just one incident, it shows that AI can help automate old vulnerabilities and that ransomware no longer requires skills to pull off an attack, according to Sally Vincent, senior threat research engineer at Exabeam.

"While the attack relied on known, older vulnerabilities rather than new exploits, it demonstrates how AI can automate and accelerate the exploitation of unpatched systems," Vincent said. "It also serves as a reminder that patching known vulnerabilities remains important, since AI can make exploiting them faster and more efficient."

While Clark stressed that none of the attack techniques were novel or sophisticated, JadePuffer is interesting because it was strung together into a complete ransomware operation by an AI model.

"The skill floor for running ransomware has dropped to whatever it costs to run an agent, and if that agent is running on stolen credentials through LLMjacking, the cost to an attacker is close to zero," he commented.

That means security professionals should expect to see more like this, as well as a higher volume of attacks, and should proactively protect "exposed application servers, unhardened configuration stores, and internet-facing database admin accounts," Clark added.

Salt Security's Eliyahu added: "The question every security team should be asking after this report is: what is holding credentials in our AI-adjacent infrastructure, and what can those credentials reach?"

FOLLOW US ON SOCIAL MEDIA

Most Managed Service Provider (MSP) service desks already have several layers of automation. From chatbots and self-service portals to AI routing and virtual agents, the tooling is widely used. Some of it resolves tech issues well, ensuring that skilled engineers are not wasting time on password resets and basic access requests.

However, problems usually start when a ticket is passed between multiple teams or arrives without the context needed for troubleshooting.

Even though MSPs are already tracking the usual metrics: ticket volume, average handling time, first-contact resolution, and technician workload, L1 teams can spend huge chunks of the day just trying to gather context. Some support teams jokingly call it the “20 Questions” phase. Who is the user? What device are they using? Has anyone already touched the machine? Did the VPN fail before the update or after it? Is this even the right queue?

A lot of that happens because support teams still lack clear visibility into what users are experiencing on the endpoint. Most MSPs now operate across ticketing, endpoint management, monitoring, remote access, and documentation tools that do not always share information particularly well. So technicians end up jumping between systems trying to piece together context that should already be sitting in front of them.

According to our analysis presented at the Gartner Digital Workplace Summit London recently, saving just one minute of context-switching time across 10,000 monthly tickets equates to 166 hours of recovered support capacity.

That is basically a full-time technician disappearing into tab-switching and context rebuilding, which is not exactly a great use of skilled people.

Escalation is where things really start getting expensive

In reality, many escalations just restart the troubleshooting process from scratch. Support teams have all kinds of names for this: verification tax, re-diagnosis, or ticket ping-pong. In some environments, AI-assisted triage has actually made this harder to spot because tickets arrive looking neatly categorized while still missing critical context.

Nobody fully trusts the notes attached to the ticket, so the next technician repeats the same checks anyway. And honestly, sometimes they have a point. By the third reassignment, half the ticket notes barely make sense anymore.

That gets expensive fast once senior engineers start getting dragged into tickets that never should have reached them. L2 teams can spend 15–30 minutes rechecking information already confirmed earlier in the support chain. L3 engineers may still insist on verifying the root cause themselves before touching anything important. Leaving some tickets basically on a doomed escalation path from the moment the initial diagnosis goes wrong.

If the underlying ticket data and context are weak, automation can just accelerate bad routing decisions. Tickets land in the wrong queues, bounce between teams, or get escalated before anybody has properly understood the issue in the first place. Some queues basically become dumping grounds for badly categorized tickets.

Why AI support struggles with unpredictable problems

Every MSP wants users to handle the simple stuff themselves rather than flooding the queue with password resets and printer tickets.

The trouble is that self-service tends to fall apart pretty quickly once the issue is no longer straightforward. Somebody reports a “slow laptop.” The system suggests a few generic fixes. Nothing changes. The ticket lands in the wrong queue anyway. Then an L1 tech has to start from scratch, figuring out whether the problem is Wi-Fi, memory usage, a bad update, or some background process chewing through the CPU.

Failed self-service gets expensive fast. Failed self-service attempts can push incident-handling costs from roughly $6 to $53 once escalation and repeated troubleshooting are involved.

Part of the problem stems from AI-driven support tools that are trained on historical ticket data and static workflows, rather than real-time device information. After all, real support environments drift all the time. Devices fall out of policy. VPN issues hit one office but not another.

That is where the bad assumptions creep in. Tickets look neatly categorized even when the underlying diagnosis is wrong. By the time the issue escalates, half of the support recommendations are due to AI hallucinations. Skilled technicians recognize that almost immediately. However, the other automations usually do not.

Reducing wasted effort in the service desk

Just throwing more AI at the service desk doesn’t fix the underlying diagnosis problem. In reality, technicians still spend way too much time piecing together context, rerunning the same diagnostics, and trying to figure out how a ticket even ended up in their queue after failing First Correct Assignment.

Smart MSPs are starting to tackle the problem at the source. They’re rebuilding their self-service portals so users can just explain what’s wrong in plain English, rather than forcing them to pick from clunky categories. After all, no one ever reports a “DHCP lease failure”; they say the internet’s down. L1 techs are also gaining real-time visibility into endpoints, rather than relying on patchy ticket notes and whatever the user happens to mention.

When you can instantly see failed updates, VPN drops, crashed services, or a machine grinding to a halt, you waste a lot less time playing detective. But even with those improvements, most MSPs still hit the same wall: all the important information lives in separate systems.

Ticketing, RMM, monitoring tools, and endpoint agents don’t communicate effectively. So every time a ticket escalates, the next person basically has to start from scratch. That’s why some of the better-run MSPs are now creating a single shared record for endpoint health and diagnostic history. When L1, L2, and L3 are all looking at the same up-to-date facts, you cut out the endless re-checking and stop tickets from getting stuck on a doomed escalation path.

At the end of the day, automation and AI are only as good as the foundation they’re built on. If self-service keeps generating dirty tickets, or tickets keep getting escalated too early, or rebuilt every time they move queues, AI is just helping you make the same mistakes faster. The teams getting real results are the ones giving every support tier access to the same live endpoint context; that’s when AI actually starts pulling its weight.

AI-augmented developer roles have increased nearly six-fold over the last five years, as enterprises move from AI experimentation to implementation, according to new research from Randstad Digital.

While there's been an increase of just 28% for traditional developers, the figure for developers with AI expertise has grown by 597%, with nearly one-in-four developer roles now requiring these skillsets.

Analysis of more than 35 million job postings shows technical professionals who acquire specialized credentials are leapfrogging traditional seniority tiers, with AWS Solutions Architect (Pro) and LangGraph/RAG Architect certifications driving estimated salary increases of 54% and 31%, respectively.

"Enterprise AI is no longer a future investment; it is today's operational reality. Yet the biggest barrier to growth is not access to technology, it is access to the right people," said Michael Morris, global head of platform and talent at Randstad Digital.

"Buying AI is easy. Integrating it safely and securely across a complex enterprise is where the true challenge lies. The specialists who can integrate, govern and scale AI inside complex organizations are in critically short supply."

While foundational roles like prompt engineers are still growing at 174%, demand has rapidly escalated up the skills ladder, with AI trainers now the fastest-growing role globally, up 281%.

As ITPro reported in February, demand for AI trainers has skyrocketed over the last 18 months. Researchers said this reflects a broader market pivot toward roles that turn AI’s potential into real support for business growth.

Demand for AI solutions leads is up 226%, process automation specialists up 196%, and AI architects up 152%, Randstad noted.

Finding talent is harder than it looks

While demand for AI-related skills is there, actually filling these positions is far harder than it appears, Randstad noted. Indeed, enterprises are facing acute challenges in sourcing talent.

AI solutions leads are currently the hardest role to fill globally, for example, with time-to-fill timelines hitting 54 days in key markets and vacancy rates of nearly 27% in the US and 18% in the UK.

Despite having talent pools of roughly 100,000 professionals, machine learning engineers face vacancy rates of 8.2% in the US and 11.2% in India. Japan, meanwhile, is facing some of the sharpest shortages globally, with a 46.8% vacancy rate for AI engineers and 25% for generative AI engineers.

All this is reflected by hiring timelines, according to Randstad. While a standard IT role typically takes 38 days to fill, the recruitment window for advanced AI infrastructure roles has expanded to an average of 54 days in the UK and 53 days in the US.

This stretches to a high of 90 days for Process Automation Specialists in Italy.

The result of this is that salary offers are rising sharply, particularly in the US. Across the Atlantic, large language model (LLM) architects have a vacancy rate of 19%, commanding average salaries of $240,000.

Brazil and Argentina have rapidly emerged as a high-growth corridor for specialized AI services, now representing over 15% of global postings combined. In Europe, the UK, Poland, Spain, and Germany show steady demand, with individual national shares between 1.8% and 2.8%, while China accounts for 7.5% of the global job volume.

"AI talent concentrated in the US and India but fast-growing corridors emerging in Brazil, Argentina and beyond, cross-border hiring is becoming a core enterprise strategy," said Morris.

"Organizations that combine global talent sourcing with deliberate investment in upskilling their existing workforce are best placed to close the gap."

FOLLOW US ON SOCIAL MEDIA

Forward deployed engineers (FDEs) could be the key to driving successful AI deployments, as hyperscalers pledge billions to embed specialists within customer teams.

Last week, Microsoft announced plans to invest $2.5 billion in a new division, the Microsoft Frontier Company. The aim here is to deploy upwards of 6,000 AI experts and engineers inside customer organizations.

These specialists will work with enterprises to co-design and build AI systems in a bid to accelerate adoption rates, according to the tech giant.

The announcement came just days after Amazon Web Services (AWS) announced similar plans with a $1 billion investment in its Forward Deployed Engineering segment, once again aimed at bolstering customer AI capabilities.

With the scale of investment – and sheer number of engineers required – for AWS and Microsoft’s push on this front, FDEs are rapidly emerging as the most sought-after technology professionals globally.

Alastair Williamson‑Pound, CTO at Mercator Digital consultancy, told ITPro that the focus on FDEs is an “exceptionally strong signal” that this could become a key growth area for the industry – and a vital pool of talent to drive AI adoption.

“FDEs have become increasingly critical because they sit inside the client, where they can drop barriers, cut through red tape, and get in front of the decision-makers quickly,” he said.

“It’s perhaps why we’re increasingly seeing them considered as a commercial weapon by cloud providers to secure long-term relationships and spend,” he added.

“Another good aspect is that pricing is fixed and based on outcomes rather than time and materials (T&M), which gives customers greater certainty around delivery.”

Williamson‑Pound noted that this aligns with “what companies are after these days”, mainly support in pushing AI adoption projects from pilot to production.

AWS noted that its FDE strategy aims to “compress timelines from months to days” in terms of AI progress, and is “designed so customers are self-sufficient when a deployment ends”.

“Those organizations that are stuck between piloting and deployment can be given that final push by [an] FDE,” he commented.

“The training and documentation they leave behind also tends to give customers that final confidence boost, helping internal teams continue developing and maintaining the system by themselves.”

The rise of forward deployed engineers

Microsoft and AWS are by no means the first big tech providers to put their faith in FDEs. Palantir somewhat pioneered this approach more than a decade ago, and other companies in the AI space have ramped up activities on this front.

As ITPro reported in May, OpenAI launched a new consultancy arm aimed at embedding engineers within customer organizations.

A key distinction here, however, is that the OpenAI Deployment Company is a standalone entity, while both Microsoft and AWS have their own internal divisions dedicated to FDEs.

Crucially, both moves mark the latest attempt by big tech providers to move the needle with regard to enterprise AI adoption, which research shows has been sluggish and at times underwhelming.

Analysis from PwC in January this year found that executives have become increasingly restless when it comes to returns on investment (ROI). Separate research, meanwhile, shows a significant portion of AI projects fail at the first hurdle.

A key factor in adoption project failure often lies in technical capabilities, or lack thereof, according to research from Dynatrace.

With this in mind, providing enterprises with a helping hand throughout the process could provide a much-needed boost for IT leaders.

Initial feedback on Microsoft’s FDE activities show promise on this front, according to Judson Althoff, CEO of Microsoft’s commercial business. In a blog post last week, Althoff claimed that early results have demonstrated “meaningful impact”.

The tech giant embedded engineers within the London Stock Exchange Group (LSEG), for example, helping accelerate AI adoption and providing finance pros with tools to provide answers to complex queries.

Close collaboration between Microsoft’s FDEs and frontline staff at LSEG helped streamline adoption and essentially create a foundation for future improvements, according to Althoff.

“The solution is underpinned by a foundation that is iteratively refined through client feedback and real-time user testing that accelerates each cycle and steadily improves model quality and scope,” he wrote.

Partnerships with Unilever and Novo Nordisk have also delivered marked improvements in terms of AI adoption, Althoff noted.

How FDEs work

FDEs essentially operate like systems integrators (SI), albeit with a few notable distinctions. An SI, for example, is typically an external contractor used to streamline the adoption of individual solutions.

With FDEs, these engineers act as consultants embedded directly within the enterprise. They also offer technical guidance, but it’s the practical support in terms of custom product development that’s a key differentiator. Simply put, they’re building alongside your own engineers.

“Typically, FDEs work in small pods for a fixed period of time, during which they sit within the engineering and technical teams of the client, writing production grade code,” Williamson-Pound explained.

“They leave the customer with a working system in place supported by full documentation, as opposed to an implementation plan.”

JetBrains CEO Kirill Skrygan told ITPro there are a range of benefits to using FDEs for enterprises, and they’re more than just a temporary boost to engineering capabilities.

“FDEs work closely with customers to translate complex organizational challenges into solutions that technology can actually deliver. Doing that well requires more than coding ability," he said.

“It demands architectural expertise, technical leadership, communication skills, and sound business judgment — all qualities that are difficult to automate.”

FOLLOW US ON SOCIAL MEDIA

The rise and fall of tokenmaxxing has been dramatic, not least because of how quickly it happened. From a darling of CEOs wanting to show how AI-forward they are to a balance sheet nightmare, the journey this particular strategy for measuring AI lasted mere months before its star started to fade.

In this episode of the ITPro Podcast, Jane and Bobby are joined by Frank Böhmer, CEO of Ninox, to talk about what prompted the trend in tokenmaxxing, why it fell apart, and what comes next.

Highlights

"[Gamification] leads to a pretty high stress factor for the employees, because they feel really pressed, even if it's not a direct performance metric, if it's just ... something that creates visibility, and so they feel really pressured to utilize LLMs to the highest possible amount."

"If you put this kind of as a success metric and monitor it, then it becomes useless, because people kind of optimize for that ... so even just looking at the output, so the number of tokens does not say a lot, and it's very easy to use models in a way that is not efficient. It can easily, for example, pollute the context window by just cramping in all the information you have."

"When you have to work with within the constraints of a budget or a token budget, then there are clearly ways to optimize the outcome I can create with models, for example, by providing the right information within the context of the model, by making sure that all the data that the company processes is readily available for models to work with by giving the right guidelines for teams to utilize that by giving them access to the right models in the right context."

Footnotes and sources

• Could rising token costs boost interest in on-premises hardware?
• Uber’s eye-watering AI bill shows enterprises are ‘still measuring AI success through consumption rather than outcomes’ – and it's warping our perception of ROI and productivity
• IT leaders are being stung by "unexpected" AI costs
• The AI pricing time bomb
• ‘What we’re seeing right now is just rapid escalation in AI token spend’: Accenture tells staff to stop using AI for unnecessary tasks amid surging costs
• Surging AI costs could exceed developer salaries by 2028 – analysts say context engineering could be the key to optimizing token consumption
• Companies are regretting investing in generative AI so quickly – here’s how to avoid buyer’s remorse
• Goodhart's law - Wikipedia

Most UK business leaders have a “limited understanding” of their AI budgets, and they're struggling to turn AI investment into measurable business outcomes.

KPMG’s latest Global AI Pulse report found that 26% of UK companies are now using AI as part of everyday work, up from 18% in the first quarter of this year.

This increased adoption means that managing usage costs is becoming both more complex and more critical to realizing value.

Three-in-ten UK leaders told the firm that they struggle with usage-based costs, while 42% have only partial visibility into AI spending. One-third, meanwhile, cited “limited understanding” of AI cost structures, including tokens, as a challenge to deploying AI agents.

“AI is moving rapidly into everyday work, but scaling it responsibly brings a new set of challenges," said Dr Leanne Allen, head of AI at KPMG UK.

"Leaders now need to show not just that AI can be deployed, but that it can be trusted, financially controlled and clearly linked to value. Cost visibility is central to that."

Enterprises need a clear path with AI

According to KPMG, companies where CEOs are accountable for AI decisions often report higher confidence in their AI strategy, and are more likely to unlock meaningful business value and stronger returns on investment.

"As organizations use more AI tools and agentic systems, they need to understand how costs build, where value is being created and where governance controls are needed. Without that clarity, it becomes harder to make confident investment decisions or demonstrate returns," said Allen.

“Clear accountability, practical governance, and workforce adoption must move together if businesses are to turn AI momentum into sustained value.”

To help manage AI costs, the survey found organizations are implementing stronger governance controls, including monitoring and spending controls.

More than half (57%) of UK leaders report having AI cost monitoring dashboards, with 61% embedding cost reviews as part of AI approval processes to enable stronger control and decision-making.

Notably, organizations with stronger cost visibility are four-times more likely to report established ROI, at 25% versus 6%.

“AI cost management cannot sit as an afterthought. If businesses want to scale AI responsibly, they need to build financial discipline into the way AI is approved, monitored and governed from the start," said Allen.

"The organizations that can see their AI costs clearly are better placed to understand what is working, what is not and where to keep investing.”

AI costs are spiralling

Surging AI costs have become a recurring pain point for enterprises across a range of industries in recent months. As ITPro reported in June, these surging costs are the result of AI provider shifts toward consumption-based billing combined with increased usage rates.

The ‘tokenmaxxing’ trend, whereby users are encouraged to ramp up their use of AI tools, has already caused serious issues for some major companies, such as Uber.

Uber revealed that it used its entire annual AI budget in just four months after encouraging staff to use the technology, prompting a rethink of how AI is used internally. This included the introduction of a $1,500 monthly cap per employee, which is tracked through an internal dashboard.

Accenture has also urged staff to stop using AI for needless tasks in a bid to tackle mounting costs.

Last week, analysts at Gartner told ITPro that tackling this problem will require a concerted focus on cost optimization practices, including the use of context engineering techniques to maximize the use of the technology.

This call to action by Gartner came after research found AI token costs could exceed developer salaries by 2028.

FOLLOW US ON SOCIAL MEDIA

Anthropic's Fable 5 and Mythos 5 are back after a three-weeks-long restriction saw the security models effectively banned.

Earlier this month, the US government applied export controls to Claude Mythos and Claude Fable 5, banning any foreign users, inside or outside the US, from either model.

As Anthropic had no way of checking the nationality of its users, both models were de facto banned from use. Last week, the restriction was loosened to allow Mythos to be used by US organizations deemed trustworthy.

Now, Anthropic has said the restrictions have been mostly dropped following the introduction of new safeguards.

"Anthropic has agreed to proactively detect and address security risks associated with the models," US Commerce Secretary Howard Lutnick wrote in a letter to the tech company, according to the BBC,

Lutnick later added on social media: "Over the past two weeks, we have worked closely with Anthropic to analyze and approve Fable 5 to ensure alignment across the US Government and strengthen America’s leadership in AI."

Anthropic said it was still working to expand access to Mythos 5 to a wider set of partners in its Project Glasswing program – which gives access to the security model in a managed way – and hoped that would include domestic and international users.

Fable 5 should now be available again for all Claude users, with access reenabled for AWS, Google Cloud, and Microsoft Foundry as quickly as possible.

Why Mythos and Fable were restricted

Fable 5 and Mythos 5 are both security focused models, sharing the same underlying model, Anthropic notes.

As ITPro reported in early June, Fable 5 was built with "strong safeguards to make it safe for general use".

Mythos, meanwhile, has fewer protections in place, and as such was released to a limited number of trusted partners under Project Glasswing for the express purpose of defensive security.

Just days after the release of Fable 5, the government applied strict export controls. That was driven by Amazon researchers finding a way to dodge Fable 5's safeguards to use it to hunt for flaws in software and produce exploits.

Anthropic argued that most of its models could actually uncover the same vulnerability and exploit demonstration, and that the Amazon research didn't make use of any "unique Mythos-level cyber capabilities".

The workaround discovered by Amazon has now been blocked for most instances, with any users attempting similar techniques downgraded to a lesser model. Anthropic admitted that more "benign requests" may be flagged accidentally now, though it hopes to reduce such false positives as the system is improved.

"One particularly important safety mechanism involves classifiers — smaller automated AI systems that, during an interaction, detect when the model is asked to perform a potentially harmful cybersecurity task (or produces potentially harmful outputs)," the company said.

"When this occurs, the classifiers block the model from responding to requests. The ultimate goal of these classifiers is to prevent the model from engaging in uniquely dangerous behaviors."

Beyond the new safety classifiers and other safeguards, Anthropic is working with industry partners including Amazon, Microsoft, and Google to develop a framework for addressing AI model ‘jailbreaking’ techniques, developing a system for judging the severity of such attacks.

Plus, Anthropic said it would work more closely with the US government, offering expanded early access for models that could impact national security and sharing information about jailbreaks or misuse patterns.

The company called for the same rules to apply to its rivals: "These rules should be codified in strong regulation and applied equally across frontier model developers."

Mixed industry reactions

It's no surprise this was sorted quickly. Keven Knight, CEO, of cybersecurity firm, Talion, noted that the US government would not have wanted to risk slowing down AI development, particularly in security.

"Given that China is steadily advancing with its advanced AI model, with a platform that mirrors Mythos being launched by 360 Security Technology last week, the US could not afford to limit access to Anthropic's platforms for much longer," Knight said.

"Restricting access to the platforms would only leave western organisations on the backfoot, and at a time when the AI arms race is really heating up, this would be dangerous."

Though the export ban is now loosened, Andrew Bloster, senior R&D manager at Black Duck, said that won't end the "chilling effect" the incident has had on the use of such models.

"Security leaders globally are now wary to depend on AI as a service models that can be launched with much fanfare and then pulled from the global market," he said, pointing to the rise of sovereign AI.

Bloster added that "technology leaders are more concerned about resilience, data security, and cost, and Fable being permitted back on the world stage might not be enough to earn back global trust."

Though Anthropic was the first company to jump through these hoops, it actually tried to find a good balance between safety and use via Glasswing, said Mike Britton, CIO at Abnormal AI.

"On Mythos, the controlled rollout to a vetted set of US organizations is actually the right model. Limiting access to trusted institutions, with use cases focused on finding and remediating vulnerabilities, is how you derive real security value from a model at this capability level without creating new risks," said Britton.

"The goal should be more secure software — and that's achievable if the access controls stay disciplined over time."

FOLLOW US ON SOCIAL MEDIA

Netgear is making strides in helping businesses make the move into AI-powered network operations and management with the launch of Netgear Insight 10.0.

This next-generation cloud network management platform will be game-changing for small and medium-sized businesses (SMBs) and Managed Service Providers (MSPs), plugging the gap between need and resource, according to the firm.

Insight 10.0 is designed to support organizations through delivery of enterprise-grade AIOps, intelligence, and operational simplicity, helping them to make decisions faster and move their business forward.

One key benefit of the new platform is empowering network administrators to move from being purely reactive to being proactive, according to Luca Marinelli, Netgear’s head of Europe.

In terms of launches, Marinelli said this is a pretty significant one for the company and a key focus during his time with the business so far, following his appointment in October last year.

“The opportunity to have a single pane of glass, which will be managing simultaneously – like with multi-tenancy – several networks will free up time for [MSPs] to maybe start providing other additional services to attract new customers, which is always something very healthy to do in business.”

“[Also] if you perform certain types of activities in a reduced amount of time, your margin can be better. This results in a much more profitable business. So, there are multiple impacts [from] using more sophisticated state-of-the-art tools," Marinelli added.

"Sometimes the feeling is that AI is just a nice slogan that you need to just add in everything you say. [But] I think the important thing is to know what to do with this superpower. If you know what you want to do, it is extremely valuable.”

Outside of product innovation, Netgear has been heavily focused on how it partners to do business. Indeed, in November 2025 it unveiled changes to its partner program in a bid to make it easier to work together and drive joint success.

At launch, Netgear’s president and general manager, Pramod Badjate, said partners were at the center of everything the company does.

“Our big play at Netgear is delivering enterprise-grade products with the simplicity that the SME market needs. That all boils down to a product that is ready for those environments, but also, from a TCO point of view, fits that customer experience really well,” said Jordan Hobday, Netgear’s UK country manager.

“The Netgear Drive Partner Program is three tiers. It's there to really incentivize and reward our partners. There's a commercial benefit to that, but equally it's about how we [can] provide a good experience to our partners, like certifications, self-serve material, all the good things that you would expect.

“A big part for us is simplicity, and how easy it is to work with or do business with Netgear.”

Netgear’s EMEA business is in good health, according to Luca, but he said the company’s turnaround journey was not finished yet. Indeed, one priority for him is not just growing partner numbers for numbers' sake, but really focusing on deeper engagement.

“I think we have, in my opinion, enough partners that we are working with. The game is to keep them interested; I don't necessarily think we need to increase the number of partners broadly. It's going to be a very selective move in both the AV and IT markets to capture the real players that we need to work with, in a given territory, in a given market,” he said.

“We work with a lot of partners, but the number of partners we have this business intimacy with is not at all at the level where it should be. It’s about ways of working with partners; it's about tools that we keep evolving; it's about the value we bring to those partners and the way we spend time. We do spend time [with partners] already, of course, but [it’s about] the way we spend [that] time. It has to evolve.

“It's [about] more quality, more depth, more intimacy, more shifting the way we work with partners, which takes a little while. It doesn't happen overnight.“

Anthropic has launched Claude Sonnet 5 in a move the company said offers users more powerful agentic capabilities.

The new option is the “most agentic Sonnet model yet”, according to Anthropic, capable of building workflow plans for users, accessing browsers and terminals, and operating autonomously for longer periods.

Cost and performance are key talking points here for Anthropic, with the company noting that Sonnet 5 “narrows the gap” with its flagship Opus range in terms of efficiency.

“Claude Sonnet 3.5, 3.6, and 3.7 were the first models that showed impressive skills in coding and tool use. More recently, though, the clearest gains in agentic capabilities have been in our Opus-class models,” the company said in a blog post.

“Its performance is close to that of Opus 4.8, but at lower prices,” Anthropic added. “It’s a substantial improvement over its predecessor, Sonnet 4.6, on important aspects of agentic performance like reasoning, tool use, coding, and knowledge work.”

SWE-bench Pro results show that show that Sonnet 5 recorded a 63.2% score on agentic coding capabilities. That marks a solid increase compared to Sonnet 4.6, which came in at 58.1%.

The model still lags behind Opus 4.8 (69.2%), but clear gains are being made on this front.

Anthropic eyes cost improvements with Claude Sonnet 5

With concerns mounting over token consumption, Anthropic is keen to emphasize that Sonnet is a far more cost-efficient model.

Performance of the model at “different effort levels” – or the intensity and timeframe of tasks – on BrowseComp shows a “strict improvement” over Sonnet 4.6.

Compared to Opus 4.8, meanwhile, Sonnet covers a “much wider range of cost-performance options”.

“It provides substantially improved cost efficiency at medium effort,” the company explained. “Its higher-effort performance can match Opus 4.8 on some tasks.

Users will also be able to adjust effort levels to help them “find the right balance of cost and performance” with both Sonnet 5 and Opus 4.8.

Sonnet 5 safety improvements

On the safety front, Anthropic noted there has been an “overall improvement” with Sonnet 5, which is far more likely to refuse “malicious requests” than 4.8 and is capable of resisting hijack attempts, such as prompt injection.

“The model shows lower rates of hallucination and sycophancy than Sonnet 4.6,” the company noted. “On our automated behavioral audit, which tests a wide range of misaligned behaviors such as cooperation with misuse and deception, Sonnet 5 scored lower (that is, safer) overall.”

It’s worth noting that Anthropic admits Sonnet 5 displays higher rates of “misaligned behavior” compared to Opus 4.8 and Claude Mythos, urging caution by users.

Safety tests for Sonnet 5 come at a critical time for Anthropic, with the company having launched Claude Mythos earlier this year as part of a gated preview with select industry partners.

How to access Sonnet 5

Claude Sonnet 5 is available across all plans from today, according to Anthropic, including Max, Team, and Enterprise users. It will also act as the default model for Free and Pro plans.

For Claude Code and Claude Platform users, Sonnet will come with an “introductory” pricing of $2 per million input tokens, and $10 per million output tokens until 31 August.

Thereafter, Anthropic said prices will rise to $3 and $15 across input and output tokens respectively.

FOLLOW US ON SOCIAL MEDIA

Britain might be in the middle of a heatwave, but cast your mind back a few weeks, and you’ll remember the rain.

In fact, Met Office estimates suggest 2026 has seen well-above-average rainfall, with some areas recording their wettest conditions in over 100 years during January and February, followed by a notably unsettled and wet spell across May and early June.

Such are the fluctuations in weather conditions that sudden rainfall can result in flooding, creating huge challenges for residents and public sector organizations. It’s into this fast-changing environment that an innovative project between Ordnance Survey (OS), Britain’s national mapping service, and technology specialist Snowflake aims to bring data-led clarity.

The two businesses have worked together to create an Intelligent Flood Readiness Model (IFRM), which has identified 1.2 million undefended buildings at risk of flooding in England, many in the most deprived parts of the country.

Harnessing the power of data-led insight

The initiative is opening eyes to data-powered opportunities, according to Tim Chilton, managing geospatial consultant at OS.

“We’re trying to create a broader conversation around the types of things technology can do across government,” he says.

“Several parties have come to us and said, ‘This is interesting, can we talk?’ What I'm trying to do on behalf of OS is to create those conversations and ask, ‘What could you achieve with our data and this kind of technology?’”

Chilton helps OS explore new commercial opportunities from its treasure troves of data. The organization started working with Snowflake in 2024. The organization uses the Snowflake Marketplace to share open data with public-sector organizations and explore commercial avenues. The priority now is ensuring OS embraces other data-led advances.

“We have a platform strategy, which is about putting our data where the customer works,” he says.

“The person who uses our data might work in geospatial, they might be a data scientist, and increasingly, as you'll find with the IFRM, they could be a businessperson who wants to ask a natural language query and be confident the results are correct.”

That approach resonates with Snowflake’s longer-term business strategy. At its recent Summit 2026 event in San Francisco, senior executives outlined the company’s plans to use agentic AI to open data access to IT and non-IT professionals. Chilton says the IFRM is an exemplar of the joined-up initiatives that will help organizations make the most of data in the age of AI.

“The model is about Snowflake and us talking about how AI can supercharge the timelines around having a problem and trying to solve it. Geospatial data really brings that data-led journey to life. A lot of government strategies are based around multi-year plans, but the climate is changing more frequently and regularly in more extreme ways than before,” he says.

“The question we asked was, ‘How could we use technology and bring in the latest data to check that those plans are still right for specific areas and even individual buildings?’ We hoped the model could help us keep on top of the issues and monitor and measure the impact of that plan on the ground.”

Finding the path forward

OS and Snowflake started the initiative in early 2026. After spending a couple of months working on the model, including ensuring the right data sets were being tapped, the organizations recognized that other sources could provide further depth, particularly the National Geographic Database. Chilton says the model will continue to be honed iteratively.

“If someone says, ‘Ah, but you didn't include this data that we've just released,’ we can say, ‘Good point, give us a week, and we'll give you some early results with your data included,’” he says.

“So, the model is a collaborative way of working, where we’re reacting to those changes in the model and the data that it uses.”

The model combines six data streams into a single layer. This layer produces key insights. For example, cross-referencing OS building datasets with the Indices of Deprivation in England identifies where physical vulnerability intersects with social risk. This insight is then layered against other information, such as Environment Agency flood and risk data.

Chilton says three key steps were crucial in the development of the model. First, project staff used the Snowflake CoCo agent to turn text-heavy documents, such as Flood Risk Management Plans, into data that the model could read in natural language.

Second, Snowflake’s semantic layer technology helped the model to understand, with guidance from OS experts, the meaning of attributes in the organization’s data sets. Finally, project staff used the Snowflake CoWork agent to create a natural language interface that allows anyone to ask questions about flood readiness.

“That capability was amazingly well received,” he says. “People can use the interface to query six well-organized and well-formatted data sets. The extraction of insights from documents, the semantic layer, and the CoWork frontend combined to create this powerful capability.”

The right data, in the right hands

"Data is at the heart of making informed decisions. As this project shows, it's rare that one body holds all the relevant data or that this data is in the same format,” says Fawad Qureshi, global field CTO at Snowflake.

“But we're now in an era where technology can bring together the right people and the right data to collaborate on making better-informed decisions."

By combining OS building data with information on flooding, social deprivation, and 3,000 pages of Flood Risk Management Plans, the model allows decision-makers to understand the potential impact of flooding in more detail than ever before. Chilton says these insights will help policymakers better understand the likelihood of flooding.

“There are already flood risk models; that idea is not new,” he says. “What is new is the ability to bring in much more granular data tied to flood risks. Not everyone in government was aware we had that level of detail. This initiative has provided an effective, practical application of some of our knowledge.”

Further work is planned in the wake of the model’s success. OS aims to make it easier for users to ask questions of data. The organization is exploring new technologies, including AI, to make data more accessible, enabling a wider range of users to unlock its value.

“We're actually ahead of the curve in comparison to many of our customers and our partners,” says Chilton.

“We're educating through doing and sharing demonstrators and great case studies like this model, and gradually you can see that cultural shift with people saying, ‘I get it, I know why there's a lot of fuss about AI and data, and we're going to give it a go.”

Other potential data sources include information from the Office for National Statistics, the British Geological Survey, and the National Underground Asset Register. In fact, OS aims to deliver an integrated approach to data within the next 12 months. Chilton returns to his key message for other digital leaders in the public sector considering AI projects.

“Give it a go,” he says. “I've seen the governance, security, data protection, and robustness of these tools. We've gone through the due diligence process, and Snowflake is a system that we trust to hold our data.”

Three-quarters of utility firms are struggling to forecast energy demands due to rapid data center infrastructure expansion.

A new study from Capgemini Research Institute suggests that eight-in-ten utilities predict more extreme and volatile demand patterns. A key factor here is that consumption patterns from AI are less stable and more difficult to model.

The biggest problem is uncertainty, the study noted, with utilities increasingly forced to plan for demand that may never materialize.

Two-thirds of electricity executives refer to “phantom” data center load requests - with 19% of these never materializing.

This forecasting uncertainty creates real problems with capital allocation, Capgemini warned, with utilities having to decide not only how much capacity to invest in, but where and when to prioritize grid modernization investments to support future demand.

Hyperscalers are feeling the pinch

Things are just as bad for hyperscalers, which need to make major infrastructure decisions against a backdrop of uncertain demand forecasts, grid availability, and connection timelines.

The problem is made all the harder by the geographic concentration of data centers, which places significant strain on local grids.

More than half of electricity executives are finding that load concentration is a major obstacle to reliable service, while large clusters of high-density facilities are creating localized bottlenecks that affect system stability and investment planning.

“AI is transforming electricity systems far beyond demand growth. It is exposing structural constraints in grid capacity, planning, and power availability, while making demand more dynamic and harder to predict,” said Claire Gauthier, global head of energy & utilities at Capgemini.

“The challenge is no longer only how much power is needed, but whether it can be delivered reliably, where and when it is required. Utilities have a defining role to play as system orchestrators, leveraging AI-enabled insights to balance grid and customer-owned resources, accelerate deliverable capacity, and enable the next phase of data-center growth.”

What’s driving energy consumption?

The projected increase in electricity consumption is largely down to AI training and inferencing, according to Capgemini.

Training and inference processes currently account for around 25% of data center energy consumption, yet this is projected to reach 60% within the next three to five years.

The consultancy noted that this not only places significant strain on data center infrastructure, but also leaves other IT workloads on the sidelines as enterprises prioritize AI-related activities.

Data centers are increasingly shifting from backup-only approaches toward primary behind-the-meter (BTM) and near-site solutions. Nearly three-in-ten say they already deploy on-site power solutions and 39% plan to add on-site/BTM within the next couple of years.

Operating independently

Looking ahead, the majority (86%) of respondents see the ability to operate independently from the grid as a competitive advantage.

Around three-quarters of utilities and data center executives told researchers they were looking to try and establish a diversified energy mix to ensure reliability and long-term resilience.

Part of this lies in the fact that renewable energy alone cannot provide enough continuous power at scale for large data centers and AI workloads.

Battery energy storage systems (BESS) are emerging as a possible solution, with nuclear Small Modular Reactors (SMRs) expected to take time to deploy.

More than two-thirds of electricity and data center executives globally are looking to natural gas as a near‑term, transitional solution until renewable energy and storage technologies can scale.

"For both energy providers and data-center operators, the key challenge is no longer only scaling capacity, but doing so under uncertainty, speed constraints, and rising system complexity,” said Gauthier.

“Success will depend on the ability to align infrastructure investment, energy sourcing, and AI-enabled operations to manage both the scale and volatility of demand, while balancing reliability, cost, and sustainability.”

FOLLOW US ON SOCIAL MEDIA

Accenture has told some staff to roll back the use of AI for basic tasks due to skyrocketing prices.

According to reports from 404 Media, leaked audio from an internal meeting at the consulting giant highlighted growing concerns about "soaring token spend".

To battle that, leaders at Accenture are pushing back against token use by "non-engineers" who are driving excessive use of the technology on unnecessary tasks, such as converting PDFs to slides, according to internal company data.

The move comes after a report in February revealed the consultancy has introduced new measures to monitor staff AI use, prompting a rise of “tokenmaxxing” by employees to showcase their uptake of the technology.

“What we’re seeing right now is just rapid escalation in AI token spend,” Justice Kwak, Accenture’s agentic AI strategy lead reportedly said in the meeting, according to the report.

He added that Accenture has hit an "inflection point" with unpredictable spend, saying C-level executives are "still asking the question of whether they’re getting value from what we’re spending on in the context of AI."

Kwak reportedly noted that Accenture's problem isn't "niche" but one that will be faced by every AI-using enterprise – and that offers an opportunity to the consultancy to offer services unpicking token use to its own clients.

ITPro approached Accenture for comment, but did not receive a response by time of publication.

Accenture isn’t alone on rising AI costs

Accenture is by no means the first company to introduce measures aimed at limiting excessive AI use in recent months. Indeed, a host of major firms have issued warnings to staff due to rising token costs.

As ITPro reported last week, rising AI costs are the result of a combination of factors, most notably the shift to consumption-based pricing on the part of providers, and the tokenmaxxing trend.

Anthropic, for example, has shifted to usage-based billing and raised costs for some users, though also increased caps for others.

GitHub in April rejigged its pricing model, leading to credits now being consumed based on token usage, a model known as token-metered or token-based pricing. The more AI tokens used, the more a company is billed.

Combined with the rapid acceleration of AI use, some firms have been hit with huge bills. One unnamed company reportedly failed to set usage limits and accidentally spent $500 million on Claude.

This has prompted some businesses to take drastic action to rein in AI spending, including the introduction of token caps and spending limits.

Uber capped employees to $1,500 a month in tokens after blowing through its entire AI budget in just four months, for example. Elsewhere, Walmart limited staff usage of its internal AI agent while Microsoft removed access to Anthropic's Claude Code over costs.

Amazon and Meta have also reportedly removed their AI "leaderboards" designed to encourage AI usage in an effort to end "tokenmaxxing".

Costly even when useful

The leaked meeting notes from Accenture suggest the consultancy is keen to limit AI use for unnecessary tasks, but continue to give engineers plenty of tokens to play with.

Reducing tokens in one part of the business and allocating more to engineers might not be a concrete solution, however. Indeed, Gartner analysts told ITPro last week that AI coding costs could soon surpass developer salaries.

With this in mind, the consultancy said a concerted focus on cost optimization practices will be needed to limit surging costs on this front – yet many are woefully underprepared to introduce such measures.

“Most organizations still lack the maturity and frameworks to effectively measure cost versus business impact," Nitish Tyagi, Senior Principal Analyst at Gartner, told ITPro.

"Software engineering leaders are increasingly concerned as token-driven AI spend becomes harder to justify, with budgets often being depleted earlier than expected."

FOLLOW US ON SOCIAL MEDIA

It's a very uncomfortable end to June with temperature records once again being broken across Europe. The technology world is moving forward unabated, though, still talking about AI and, in particular, the workforce and infrastructure that underpins it.

Do we have the talent to meet the demand for AI? Do we have the power to keep our data centers operational? And can the European Union get us off our dependence on Google Workspace and Microsoft 365?

ITPro's news editor Ross Kelly joins Jane and Bobby to look back on some of the most interesting stories of the month.

Highlights

"It's a paradox, isn't it. AI is going to remove and destroy half of the entry-level roles within the next decade. White-collar roles are going to be impacted, but at the same time, we're dealing with a massive deficit, specifically for AI roles. The messaging here is so all over the place, so consistently, that I think a lot of people are just maybe a bit jarred by it all."

"The higher occupancy, the greater the energy draw, and if you've got a problem with energy supply, then greater tenancy or greater occupancy rather becomes a problem. I understand the problem of electricity demands, sitting here in a heat wave. People are already talking about how if everybody deploys air conditioning into their houses, that it's going to cause a problem for the national grid. I understand that, but the bit about occupancy being so high, I'm baffled that this is allegedly a negative part of this story."

"Not to offend any guests of said podcast, but it does sometimes feel like a bit of a 'no true Scotsman' argument when it comes to open source. That this isn't quite actually open source because this tiny bit of it is not actually, or this isn't open source because it's actually based on this thing that is a commercial thing belonging to somebody else. I think it's possible that the Document Foundation has a point that what the European Union has declared is like this open source saying truly sovereign whatever isn't, it's kind of halfway there, but I do also wonder if there's sort of almost a back compatibility stepping stone type thing going on, because already lots of organizations within the European Union will have been using Microsoft, so it might just be easier to have something that's based on Microsoft standards initially before then transitioning to something else."

Links

• UK faces huge AI talent shortage
• The UK is running on fumes as data center build-outs can't keep pace with demand
• Euro-Office 'sovereignty' claims questioned in scathing open letter by LibreOffice maintainers

Three quarters of companies have had to halt AI projects because of safety and security concerns over the last year, and systems like Claude Mythos are only going to make security teams' jobs harder.

That's according to a pair of surveys by Aikido and CybaVerse, which highlighted that AI is clearly becoming a security problem – a fact echoed by Five Eyes cybersecurity agencies warning that leaders need to act now to stay ahead of AI-related security risks.

"Adversaries are already using AI to move faster and more effectively. Defenders must do the same," said the UK's National Cyber Security Centre in a blog post.

Rolling out AI to solve the challenges of AI may not prove a simple solution, however. A survey from Aikido Security found that 76% of organizations polled had to stop, restrict, or roll back AI projects over the last year.

That figure rises to 98% for more active teams that are shipping multiple times a day.

The report found that seven-in-ten companies had a security issue that was harder to detect, investigate, or remediate because of AI, which again rose to 86% for daily shippers.

According to Aikido, the key challenge here lies in velocity. AI has accelerated the pace of development, meaning security teams have less time to spot flaws — and more arrive by the time the first round can be fixed.

Notably, the survey found that three quarters of those polled are rolling out significant production changes weekly – or faster – but only two-in-ten are validating security at that rate.

Because of that, nearly eight-in-ten are concerned about vulnerabilities being introduced between tests and half say test findings are outdated by the time they see them.

Rising AI security concerns

It's perhaps no surprise then that nine-in-ten security professionals see the rise of security-focused models such as Anthropic's Claude Mythos as increasing cyber risk for companies

According to a survey by CybaVerse, 86% of polled cyber pros believe AI systems like Mythos will cut the time it takes for hackers to spot and exploit flaws, leading to more patching. More than two-thirds said their employer lacks the budget to address that increased workload.

“Advanced AI platforms were blasted into the public domain and organizations had no time to prepare for the impact they would have on their cyber defences," said Oliver Spence, CEO of CybaVerse.

"Now that some of the largest technology companies in the world have access to these platforms, we are already seeing an increase in the volume of vulnerabilities being identified and disclosed, with the latest Patch Tuesday being the largest on record."

Looking ahead, security professionals aren't optimistic that AI will make the situation better. Indeed, three quarters believe an advanced AI system will eventually be weaponized by cyber criminals.

"This is something organizations must be prepared for because bulletproof security doesn’t exist," said Spence.

Back to basics

Spence added that core defense techniques haven't changed, even if AI has accelerated the pace of vulnerability discovery.

"Security teams still need visibility of their assets, they still need strong vulnerability management processes and they still need to prioritise remediation efforts based on risk," he said.

"Advanced AI may change the speed and scale of cyber threats, but the organizations that maintain strong cyber hygiene and focus on reducing exposure to their most significant risks will always be in the strongest position to defend themselves,” added Spence.

FOLLOW US ON SOCIAL MEDIA

AI is already transforming the workplace, but does today’s workforce have the necessary skills to use it productively, appropriately, and safely?

The short answer, experts agree, is no. According to Forrester, most employees lack the baseline understanding, skills, and ethics to use AI tools like Microsoft Copilot or Google Gemini in this way. Among information workers in five countries, the analyst firm found that High AIQ only grew from 12% to 16% between 2024 and 2025, and front-line workers are likely further behind still.

“While we don’t have a survey of the AIQ of frontline workers at this point, we assume that they lag further due to gaps in education and immersion into tool usage,” notes J.P. Gownder, vice president and principal analyst on Forrester’s Future of Work team.

While natural language input and multimodal models can lower the operational barrier of AI tools, ease of input isn’t the same as the competence of use. Vendors consistently underplay the human side of AI, says Gownder, which includes the skills, motivation, ethics, and behaviors employers need to cultivate for employees to use AI successfully at work.

“[It’s not] a straight line to success: AI hallucinates, generates coherent nonsense that sounds right but isn’t, can violate privacy standards, and reinforce poor human decisions through its sycophancy.”

Natural language removes one barrier but quietly raises another: that of judgment, says Professor Rose Luckin, founder and CEO of EDUCATE Ventures Research. “The tool will answer almost any question fluently, including those it shouldn’t and when it’s wrong. So the claim that these tools are accessible to anyone confuses producing an output with producing a reliable one.”

What’s the worst that can happen?

Lack of ‘AIQ’ can lead to misuse and mistakes, and so a business opens itself up to a lot of risk if users aren’t properly trained, notes Holly Chate, coo of FutureDotNow – a coalition of UK-based leaders working to close the digital skills gap.

Untrained users might unwittingly share customer or company data: “If you put confidential information into an open source GPT, suddenly that data’s now publicly available,” she points out. They may also pass along incorrect information to customers or prospects, or generate confidently wrong answers about their next best step on the job.

There’s a further risk beyond individual error, Luckin adds, noting that people who don’t understand the tool are the most likely to outsource their judgment to it, accepting what it produces because questioning it feels beyond them. “Over time, that erodes the very capabilities they need to use it safely. The gap isn’t only about access, it’s about who retains the judgment to stay in control of the tool and who gradually hands that control over.”

The four key AI skills employees need to have

In reality, the use of AI tools can widen the digital confidence gap between employees, with the confident getting more capable, while the hesitant fall further behind. The solution to this, and to reducing the other related risks, is to ensure your staff gets the necessary training. But what exactly does this entail?

FutureDotNow developed evidence-based AI skills recommendations to embed into the UK Department for Science, Innovation and Technology’s (DSIT) Essential Digital Skills Framework. Its research found four key AI skills that every worker needs to have. These are AI literacy and understanding, effective communication with AI, critical evaluation of AI outputs, and responsible use of AI.

In the case of effective communication, prompting matters, as this is something that doesn’t come naturally to most people, notes Luckin. “The better the prompt, the larger the pattern you give the model to match, so structured prompts with clear context produce better output.

“My caution is about sequence and proportion,” she continues. “I once sat through a training session that spent 45 minutes on prompt engineering and never once explained what a large language model (LLM) does or why it hallucinates. That’s the wrong way round. Teach it after understanding, not instead of it.”

The ability to critically evaluate AI output is the skill most worth investing in, Luckin says, which has three parts. She recommends starting with the why, as people evaluate output far better once they understand that the model generates plausible text rather than checking facts. Next is to build habits.

“I describe this as the ‘wobble test’: ask for sources, challenge the detail, press on the claims and see whether the answer holds together or collapses,” Luckin says.

“Practical checks help too, such as confirming that cited references actually resolve, since invalid digital object identifiers (DOIs), broken links, and fabricated citations are common signatures of generated text.”

The third part is domain grounding. Critical evaluation depends on knowing enough about the subject to sense when something’s off, so training is most effective when it’s contextual, practiced on real tasks the learner cares about, and uses genuine examples of failure, rather than delivered as abstract drills, Luckin explains.

Getting training right

A 2025 survey from McKinsey found that while 88% of organizations use AI, only 6% are generating meaningful returns. Work by BCG explains why, says Luckin: “Algorithms account for 10% of AI success – people and processes make up roughly 70%.”

This highlights the importance of staff training, but it’s just as critical to get that training right. Gownder notes that too few organizations currently invest in sufficient training: “It’s typically one-and-done.” AI requires iterative training, he says, as it changes all the time, and employees need practice and reinforcement. He adds, however, that social learning and practice are even more important.

Chate recommends designating ‘digital champions’ within teams, as “humans learn from humans. If you identify a handful of people to give extra training to, and incentivize them to support their colleagues, that’s been proven hugely successful.”Another idea is to build AI training into the day-to-day, she notes, such as adding 10 minutes to the end of a weekly meeting where people share their top tips or ask questions. “Having that little bit of support and knowing where to go is really helpful,” she adds.

OpenAI has expanded its Daybreak cybersecurity initiative to cover fixing vulnerabilities, not just identifying them.

The AI developer has introduced a series of new tools, and signed up a host of partners to lead the scheme, including Accenture, Check Point, Cisco, CrowdStrike, IBM, and more.

"Vulnerability reports, on their own, do not protect anyone. The value comes from validating the issue, understanding its impact, developing and testing a patch, coordinating disclosure, and helping teams deploy the fix," said the firm.

"We are investing alongside our partners to improve these latter steps, in order to turbocharge defenders and convert model capability into real-world risk reduction."

OpenAI said it has tweaked models to discover and generate patches for critical vulnerabilities⁠ in major browsers, network infrastructure, and operating systems such as FreeBSD and the Linux kernel.

To scale the effectiveness of these capabilities, it's launching an update to the Codex Security plugin⁠.

This aims to speed up the process of discovering and patching vulnerabilities in existing systems, as well as automatically preventing new vulnerabilities from ever reaching production.

OpenAI touts GPT-5.5-Cyber capabilities

Notably - and following an initial permissive-only preview - OpenAI confirmed plans to launch the full version of GPT‑5.5‑Cyber through a continued limited release.

The company is also working with researchers, maintainers, enterprises, and partners for its Patch the Planet⁠ initiative, founded with Trail of Bits to help widely used open source projects move from findings to fixes.

More than 30 open source projects have committed to participate so far, including:

• cURL
• Go
• Python
• Sigstore
• pyca/cryptography

OpenAI leans on partners

Elsewhere, the new OpenAI Daybreak Cyber Partner Program ⁠allows participating organizations to use GPT‑5.5 with Trusted Access for Cyber in the security products and services they provide.

This, the firm said, allows their customers to get the benefits of the model’s defensive capabilities and make their software more resilient, but still keeps direct model access in the hands of participating partners.

“Organizations are looking for practical ways to apply AI to strengthen cyber defence while maintaining strong governance and safety controls,” said Ryan Kalember, chief strategy officer at Proofpoint.

“By incorporating GPT-5.5 through the OpenAI Cyber Partner Program into Proofpoint’s products, services, and AI-powered security workflows, we can help security teams improve threat investigation, decision-making, and efficiency as they protect their people, data, and AI agents."

Government engagement

OpenAI said it's also been working with government bodies in Australia, Canada, France, Germany, Japan, the Republic of Korea and the EU, on cyber testing, evaluation, and standards.

"We also have a growing and trusted partnership with the UK government around cyber testing and evaluation, and other areas of mutual interest," said the firm.

"We plan to work directly with eligible operators of critical infrastructure, including government networks, to develop safeguards tailored to the systems they operate."

FOLLOW US ON SOCIAL MEDIA

Three years ago, a Californian man claimed that he'd been rejected hundreds of times by Workday's AI-driven HR system – now a judge has ruled that a class action based on the complaint will be heard in court.

US District Judge Rita Lin has ruled that Workday must face the claims brought against it, which includes claims that the company's AI-based candidate screening system discriminated on the grounds of age, race, and other protected characteristics.

With the case set to proceed, this makes it the first to consider the impact of letting AI-powered software make decisions on job candidates – a significant case given the rise of recruitment.

Indeed, a report from HireVue suggests seven-in-ten companies are using AI in HR and recruitment processes. The shift to AI hiring isn't popular, either, with two-thirds of Americans telling Pew that they didn't want to apply for a job via AI.

A spokesperson for Workday told ITPro the “claims in the suit are false” and dismissed claims that AI recruiting tools make hiring decisions.

“Workday’s AI recruiting tools don’t make hiring decisions in California or anywhere else,” the spokesperson said. “Our customers maintain full control of their hiring process and our tools are designed with human oversight at their core.”

Workday added that its technology “looks only at job qualifications, not protected traits like race, age, or disability”.

“We rigorously test our products as part of our Responsible AI program to confirm our tools do not harm protected groups.”

Workday case considerations

Lin ruled that anti-discrimination laws do indeed apply when Workday's software is used outside of California, where the company is based and where the claim was filed.

Workday's lawyers had argued that "it makes no sense for a Texas employer with a Texas applicant who will perform work in Texas," but Lin disagreed.

Lin also refused to drop a claim alleging that the software filters out candidates using "proxy indicators", including gaps in employment history, which could impact those with disabilities or illnesses.

One claim was dismissed, however. This sought to include discrimination against Asian Americans in the suit, on the grounds that proper procedure wasn't followed.

History of the case

In 2023, Derek Mobley first sued Workday claiming that he had been rejected by the company's software, which is used by other companies to sift through candidates, between 80 and 100 times.

Mobley believed that the Workday pre-selection system was discriminating against him because he is a black American, over 40 and suffers disabilities. At the time, Workday said the lawsuit was "without merit."

Workday attempted to have the case thrown out in 2024, but Judge Lin dismissed those challenges, ruling that the company wasn't an employment agency but could for the case be considered an employer.

She dismissed claims that the discrimination was intentional. At the time, Workday said it was confident that the remaining allegations would be "easily refuted."

Earlier this year, Mobley was joined by four other would-be candidates, with the judge ruling they could be considered together as a class action.

One of the new plaintiffs, Jill Hughes, said she submitted hundreds of applications that were rejected, with some responses saying she didn't meet the job's minimum requirement, when she actually did.

The AI recruitment conundrum

With the case set to go ahead, it could reveal much sought after details about how AI is being used in recruitment and how it influences who is being hired – and not.

The case comes as AI has overrun recruitment, with companies using it to power everything from sifting through CVs to conducting interviews, while would-be candidates use AI to find open roles, apply automatically, and boost their responses in interviews.

This has created a situation where AI is essentially talking to AI in order to hire a human for a job. Anthropic raised eyebrows last year when it told candidates not to use AI when applying, for example.

Workday isn't the first company to be caught out by the risks of using AI for recruitment. Back in 2018, Amazon was forced to pull an AI tool it was testing for recruitment after it became clear the system was methodically filtering out CVs submitted by women.

FOLLOW US ON SOCIAL MEDIA

IT teams are growing increasingly concerned about AI-related risks amidst continued adoption, according to new research.

Findings from Heimdal’s State of AI Risk Management in 2026 report show AI tools are now commonplace across most IT estates, with teams often running several at one.

ChatGPT, for example, runs in nearly three-quarters (71%) of UK IT environments, while Microsoft Copilot is present in 68%. These same figures are reflected across the Atlantic, with US-based IT teams often using a combination of multiple different AI solutions.

AI tools are playing a key role in reducing workloads, the study noted, which IT teams highlighted as the most positive benefits of the technology.

Nearly three-quarters of IT and security teams said they lose around a quarter of their week to “repetitive, low-value work” - and AI is helping reduce that manual toil.

Indeed, teams facing the highest levels of operational load are often ranked among the most optimistic when it comes to AI. More than half (59%) of US teams said they expect AI to alleviate pressure, while 55% in the UK expect the same.

AI-related risks are haunting IT teams

Despite this optimism, a key recurring concern among IT leaders is that controls and security capabilities haven’t kept pace with the rate of adoption. Heimdal noted that only four-in-ten teams rate their security stack as “ready for AI-related risk”.

Teams are increasingly concerned about data leakage, for example, with 56% of UK respondents highlighting this risk. Visibility is a major issue in this regard, Heimdal found.

UK teams with full visibility into AI use were most likely to flag data leakage as a leading concern, compared to just 27% of those with no visibility. In the US, 59% of teams with full visibility also highlighted data leakage as a key concern.

While concerns over potential risks typically mount as AI tools are integrated, Heimdal noted that unauthorized AI use, or ‘shadow AI’, is also a recurring problem for enterprises.

Heimdal specifically highlighted the Salesloft Drift breach in August 2025 as a key example of how poor AI-related visibility can impact organisations.

The incident saw threat actors steal OAuth tokens for Drift’s AI chatbot integration with Salesforce, using these to extract data from several hundred Salesforce instances.

A host of organisations, including Cloudflare, Palo Alto Networks, and Zscaler were impacted in the attacks.

“Drift was the AI tool. Salesforce held the data,” the company noted in a blog post.

“Most of the affected teams had never personally provisioned Drift,” it added. “A third-party AI chatbot, plugged in through an OAuth grant few had recently reviewed, became the way in.”

Contrasting priorities

Perception of AI-related risk among frontline practitioners and executives is a major problem, according to Heimdal. Indeed, “executive confidence” in AI security is a repeated point of friction when it comes to governance and risk management.

In the US, for example, 29% of executives said AI risk is under control, yet just 7% of practitioners agreed. In the UK, meanwhile, these figures stand at 18% against 11%.

Adam Pilton, cybersecurity advisor at Heimdal, said this shows many organizations still aren’t fully aligned on how they manage AI risk.

"Misplaced confidence is one of the most dangerous things in security. This data shows executives are far more confident that AI risk is under control than the evidence supports. Most of the conversation right now is about productivity, when the bigger question is how AI can be turned against the business,” he said.

“The report shows the gap between how secure leaders feel and how secure they actually are.”

FOLLOW US ON SOCIAL MEDIA

Microsoft has announced that Copilot Cowork is now generally available for users globally, following a beta period via the tech giant’s Frontier program.

First announced in March this year, Copilot Cowork marks a significant milestone for Microsoft 365 Copilot users, integrating Anthropic’s highly popular tool within its flagship product.

According to Microsoft, Initial testing of the platform by a host of major companies, including Accenture, has proved highly successful.

In a blog post detailing the launch, Charles Lamanna, Microsoft’s EVP for Copilot, Agents, and Platform, said Cowork is the “fastest growing feature” in the history of the firm’s Frontier program.

“Cowork has among the highest user satisfaction of any Copilot or agent experience we have shipped,” he wrote.

“We learned from what we saw, engaged with you along the way, and used everything we heard to improve quality and add new features, including model choice, extensibility through plugins, and new cost management controls. Read more below and watch the full demo.”

Here’s what users can expect with Copilot Cowork.

What is Copilot Cowork?

Copilot Cowork is an integrated version of Anthropic’s Claude Cowork, which launched in January this year. The platform provides users with industry-specific AI capabilities to automate tasks across a range of professions.

Users can direct agents to carry out tasks on their behalf - such as file management or sending emails - by giving bots access to their files. The company described the new platform as essentially providing every worker with a “specialist” for their individual role.

Notably, the launch of the Cowork sparked a sell-off in the software market amid fears the AI tool could render dedicated software services obsolete.

Copilot Cowork features and capabilities

Users at Microsoft shops can expect all the typical capabilities offered by Cowork, albeit with a few new features, according to Lamanna.

Notably, users will be able to choose which model they use with the service. Copilot Cowork currently runs on Anthropic models such as Claude Opus 4.8 and Claude Sonnet 4.6.

Customers will also be able to use GPT-5.5 further down the line with the launch of Cowork 1, the company revealed. According to Microsoft, this will deliver “optimal” cost and quality, and is intended for “enterprise-grade use”.

The tech giant noted that tweaking has helped remove model bias.

“It’s designed to handle everyday Copilot tasks at a substantially lower cost, making it a strong option for cost-sensitive workloads,” Lamanna wrote.

New partner plugins have also been added to Copilot Cowork, according to Microsoft, with a host of partners such as Miro and Monday.com already available.

Other partner plugins include:

• Enosix
• Harvey
• LSEG
• Moodys
• Morningstar
• S&P Global Energy
• TeamsMaestro

Several more are coming soon, including plugins for Atlassian, Canva, Box, Databricks, and Adobe.

Microsoft also touted a number of security-focused features for Copilot Cowork, aimed at shoring up governance and compliance. Cowork, prompts, responses, and artifacts, for example, now flow through existing Microsoft 365 controls.

Copilot Cowork pricing

To use Copilot Cowork, users will need to go through the Microsoft 365 Copilot User Subscription License (USL). This means that users are billed on a usage-basis, and charges are based on what particular tasks they use these agents for.

In terms of costs, customers have two payment options: PayGo and P3 (Credit Pre-Purchase Plan). The former is aimed at customers aiming for flexibility in terms of how they use the service, with credits priced at $0.01.

P3, meanwhile, is for those who want to commit to a usage volume “in advance in exchange for a discount”.

The cost of Copilot Cowork comes at a tricky time for businesses globally, particularly since the rise of the ‘tokenmaxxing’ trend which has resulted in some firms racking up sizable AI bills.

Cost control features are available for customers, however, with Microsoft noting that customers can “decide when Cowork turns on, who gets access, and how much can be spent”.

Spending limits will be available at the tenant, group, and user levels, meaning admins can control costs and usage rates.

“Admins create scoped billing policies and define budgets, including user-level caps set inside group policies,” the company noted. “Admins set the thresholds that matter for their organization and groups, and choose who gets notified when spend crosses them.”

In the event that users exceed usage limits, credit requests can be made to complete tasks. These can be requested from inside Cowork.

FOLLOW US ON SOCIAL MEDIA

If it looks like AI professionals are in demand right now, just wait for 2028, when the UK's set to have more than half its AI roles unfilled.

New research from Native Teams and Robert Walters has found that demand will reach nearly 300,000 roles, against an estimated domestic supply of just 137,000.

"The scale of projected demand for AI talent is expected to significantly outpace domestic supply growth in many advanced economies, including the UK," said Phill Brown, global head of market intelligence at Robert Walters.

"Historically, major advances in technology only translated into meaningful productivity growth once organisations had the workforce capability to implement them at scale. The same dynamic is now emerging with AI, where access to experienced talent will play a defining role in how quickly businesses can convert investment into measurable economic output."

The answer for many organizations is to hire staff internationally, rather than simply throw money at the problem. And doing this, the researchers found, could lift UK productivity growth by 0.5 to 1.5 percentage points annually, by helping organizations scale AI capability more quickly and reduce deployment delays linked to talent shortages.

The supporting infrastructure behind a globally distributed AI team – global payroll, work payments, and compliance systems – has widely matured over the past few years, the researchers found, making global hiring far more practical at scale.

With the biggest AI deficit, the UK is also the most active global AI talent hirer. In technology specifically, the UK generates 20% of all cross-border tech transactions, ahead of the US at 15%. And it's also the fastest-growing market, adding more than 50% year-on-year.

"Organizations are now able to access critical AI capability more quickly and respond faster to changing technology demands, while also creating greater access to worldwide opportunities for professionals," said Jack Thorogood, founder and CEO of Native Teams.

The researchers found that the top 10 origin markets generate two-thirds of all cross-border hiring, with each one offering cost savings of between 40% and 68%. Europe-to-Europe hiring generated 41% of all hiring activity.

Four-in-ten roles are either senior or leadership – signalling, said the researchers, a shift from cost arbitrage to capability building.

The two main sources of talent, Spain and the Philippines, are rather different. Spain is seen as a hub for international hiring, supported by strong digital infrastructure and favourable remote work policies. It's also popular for its time zone and EU access.

The Philippines, meanwhile, has a strong position as a global talent hub, particularly in IT services, customer support, and remote operations. Language and cost are also factors.

"Global hiring is no longer merely a contingency for local talent shortages; it is rapidly becoming the primary workforce strategy for businesses focused on growth and scale," the report concludes.

"Organisations are turning to cross-border hiring not just to support expansion, but to accelerate AI adoption and enhance overall productivity. This shift is driven by the reality that domestic talent supply, particularly across technology and AI-related roles, has reached a ceiling that current local pipelines cannot sufficiently meet."

Kaseya has outlined an ambitious plan to unify its sprawling product portfolio around a common data layer, open APIs, and AI-driven automation, as the vendor seeks to move beyond its acquisition-led past and position itself for what it calls the era of autonomous IT.

The announcement, made at Kaseya Connect Europe in Prague this week, marks a strategic shift for a company that’s spent much of the past decade expanding through acquisitions. Rather than adding more products, execs are now focused on integrating the technologies already inside the portfolio.

“We’re doing the hard work to connect the data and open up the APIs,” Kaseya CEO Rania Succar told ChannelPro.

Focus shifts to platform architecture

The strategy is being led by CTO Pratik Wadher, who joined the company last year and has been tasked with building a common platform architecture across Kaseya’s product set. The long-term goal is to create a unified data layer capable of supporting AI agents that can automate ticket triage, remediation, reporting, onboarding, and other routine operational tasks.

Succar argued that many vendors have focused on adding AI features without first addressing the underlying data challenges.

“We’re actually doing the hard work to connect the data and open up the APIs,” she said, adding that AI becomes easier once those foundations are in place.

Elsewhere, Kaseya is expanding API access to allow MSPs to build their own integrations, customer experiences, and business intelligence capabilities on top of the platform.

Larger MSPs in the spotlight

The move reflects a growing focus on larger and more sophisticated MSPs. Historically, Kaseya has been strongest among small and mid-sized service providers, but execs now believe larger MSPs increasingly want access to the underlying data and APIs to build their own solutions.

“We are going to really focus on helping the largest MSPs be successful,” said Succar.

Partners at the event suggested that many of the changes introduced under Succar’s leadership are already being noticed, particularly around openness, product integration, and a greater focus on engineering execution.

“That change of management has really seen that progressive change,” said Simon Gurner, managing director of UK-based MSP Sunrise Technologies. “They were very, very siloed before, and they’re really pulling together now.”

Execution remains key

Alongside the positive reception, MSPs acknowledge that delivering a truly integrated platform will take time.

Jason Fry, managing director at MSP Global Four, said his organization had already invested heavily in building its own automation and reporting layer across multiple Kaseya products. And while welcoming the direction of travel, Fry cautioned that the work is only just beginning.

“It’s going to take them another year or so to fully develop and get all of that in place.”

The first capabilities built on the new platform are expected to become available later this year, with Kaseya planning to expand the functionality over time as more products are brought onto the common architecture.

If an organization is surprised to see IT costs explode when it starts running agents at scale, the problem might not be in the IT budget – it might be a category error. At least in the opinion of HPE CEO Antonio Neri.

“I don’t think of [AI agents] as an IT cost,” Neri tells ITPro at HPE Discover 2026. “I think about the cost of the workforce because, to me, an agent is no different than any other employee I have to hire.”

“So if I hire [a person], there is a cost to onboard him and make sure that he's productive by giving him the tools and everything else,” he says. “When I train an agent, it's going to cost me a number of tokens to train it to drive the best productivity. If I'm going to spend a million dollars to train an agent, it has to be way more productive than [the person]. Otherwise, why am I doing that?”

This turns on its head much of the conversation around agents, tokenmaxxing, and costs as agentic AI starts to eclipse generative in organizational use.

AI sticker shock

ITPro wrote in May about “tokenomics” and so-called sticker-shock when the AI bill finally came due for many businesses. Famously, Uber used up its entire annual AI budget in four months and has now capped the amount each employee can spend on agents per month.

One answer that’s been given to the problem is a shift to on-premises IT rather than ‘cloud-based’ AI like Anthropic’s Claude Code or OpenAI’s Codex, and moving agent costs from OpEx back to CapEx. For an enterprise hardware company like HPE, surely this should be an opportunity to increase hardware sales?

“Sure,” says Neri. “But we think about it as a total cost of [the] workforce, not as an IT expense.”

And is this something that he’s educating his customers about, or do they see it another way?

“Yes, I am,” he says. “I’m spending more than 50% of my time with our customers, and when I bring that concept to life for them, they say ‘ok, ok!’”

“I’d rather give a little bit more budget to IT to reduce my entire cost of the workforce, which is – depending on what you do – probably one of the biggest cost levers,” he continues. “I have only two large cost drivers: people and materials. The materials, in networking, we have a lot of that under control because we have the IP, but a lot of servers, obviously, CPUs, and GPUs I don’t control.

“[The people] I have 65,000 employees. It’s not about reducing employees, which in some cases will happen, but it’s about making those 65,000 employees way more productive with the aid of AI by freeing up capacity for the humans to do more value-added [work] while the agentic models do more work at much bigger scale. I think about that, the total cost of [the] workforce”.

Human / AI interaction

This is an idea that’s been seeded here and there throughout the conference. In Rami Rahim’s keynote, which took place just a couple of hours after Neri’s, one of the demonstrations floated the idea of taking humans out of the loop once a process has been approved.

Katrina Pickett, senior product manager, Juniper Networks, showed how HPE Marvis might help detect and remediate a problem with a sluggish network. The conversation between person and machine was in natural language, but the fixing was agentic. At the point that the fix was applied, Marvis asked if Pickett wanted to have an agent apply the same fix automatically in the future, without human intervention, which would present a time saving.

Human-in-the-loop (HTL), however, has been a key mantra of not just AI but automation more generally. Is it time to take another look at this attitude?

“Well, once you’re confident about [what’s happening], then you can remove the human from the loop and just put on the loop,” says Neri. “I think there needs to be some sort of oversight, but not doing the actual work.”

“In the case of networking, a lot of things were done manually through [the] command line interface, by logging in the console, and putting hands on a keyboard,” Neri continues.

“The scale is now so big that humans cannot possibly manage that scale. Therefore, there is no other choice than to automate things and use artificial intelligence to manage massive amounts of data.”

Naturally, there are caveats. The story of the company that had its entire codebase and all backups erased by a rogue agent is quickly passing from fact into legend; a cautionary tale for any business thinking of letting agents roam free in their network.

“I always say, you don’t get what you expect, only what you inspect [so] I think there needs to be some sort of oversight,” Neri says. “Human beings make mistakes, agents may make the same mistake, right? But as you’re doing it at a bigger scale, it may have a huge impact.”

Mistakes happening are “inevitable”, says Neri. Ultimately, though, there has to be an element of trust that the technology will work as intended. Guardrails can help with this, and, from Neri’s perspective, what HPE is doing with GreenLake Intelligence and Marvis Actions means customers can deploy agents with greater confidence to whatever extent they wish.

HPE still makes everything it always did – it has storage appliances, and it has servers a-plenty, and they’re popular too. According to the company’s most recent earnings call, traditional server orders are booming, growing triple digits year-on-year, while Alletra Storage MP orders also increased triple digits.

The conversation, however, will always revert to networking when it comes to visions of and for the future.

“There was a question in a previous session [that was posed] to Rami (Rahim), which said how far are we to really being fully autonomous, and we believe it’s within the next 12 months,” says Neri.

“It’ s not going to be everywhere across the network, but there are many aspects of the network just running itself.”

“Our opportunities are in the three domains: networking, cloud, and AI. Networking is a huge opportunity; we see it is. And it’s driven both at the edge to the campus and branch, the on ramp into the AI. You need that connectivity.”

Cloudflare has announced the launch of a new Cloudflare One Design Partner designation, alongside an AI-powered toolkit aimed at simplifying security platform migrations.

The initiative is designed to help organizations modernize legacy security environments and accelerate adoption of secure access service edge (SASE) architectures.

According to Cloudflare, migration away from fragmented security and networking environments can often throw up operational challenges such as configuration risks, security gaps, and lengthy deployment timelines.

Housed within the vendor's PowerUP Partner Program, the new high-priority designation will provide partners with additional technical enablement and resources to counter these issues through its Cloudflare One platform.

The pool of initial partners selected for the program includes Arctiq, Consortium, CMT, Presidio, and The Missing Link. In an announcement, Cloudflare chief partner officer Tom Evans said the company is increasing its investment in partners as demand grows for modern security platforms.

"Cloudflare One has evolved into a partner-led engine, and our new Design Partner Designation is built to propel long-term growth," he commented. "This new framework represents our deepest channel co-investment yet."

Cloudflare One Stack

Alongside the new designation, the vendor has also introduced the Cloudflare One Stack, a collection of AI-powered deployment and management tools designed to help partners and customers evaluate, deploy, and manage Cloudflare One environments.

Built directly on top of the platform, the toolkit includes structured knowledge libraries, decision trees, automated workflows, and blueprint configurations that can be used with AI agents to assist with projects and reduce manual provisioning.

The offering draws on deployment knowledge developed through customer migration projects and is designed to automate and assist with a range of tasks typically associated with SASE and zero trust rollouts.

Capabilities include network assessment, VPN replacement planning, security policy translation, troubleshooting, and migration support for organizations moving from platforms such as Zscaler and Netskope.

Additionally, the toolkit can integrate with the Cloudflare API, allowing AI agents to inspect configurations, recommend changes, and automate deployment workflows.

Partner focus

Cloudflare said its new partner designation and resources mark the latest phase in its wider efforts to strengthen its channel ecosystem around the Cloudflare One platform.

Partners participating in the program will gain access to the Cloudflare One Stack, alongside technical expertise and deployment support aimed at improving large-scale security transformation projects and customer migrations.

"We are equipping our elite partners with the financial runway and technical mastery they want to scale the Cloudflare One platform," Evans added. "By blending our unified SASE architecture with partner expertise, we are turning complex network migrations into high-margin, high-value consulting opportunities for the AI era."

AI may have become ubiquitous in the workplace, but new research shows that some employees are increasingly pushing back on AI tools by sabotaging their rollout.

Generative AI company Writer and research firm Workplace Intelligence found that 29% of 1,200 employees across the UK, US, and Europe had engaged in sabotage. Examples include opting out of AI training, ignoring company guidelines on AI use, and refusing to use tools altogether. There is a greater resistance to AI tools among younger workers, with 44% of Gen Zers admitting to sabotage.

In extreme cases, workers have even resorted to uploading sensitive company data into unapproved tools and tampering with performance metrics to make it seem as though tools are underperforming.

Charles Radclyffe, founder of SaaS enterprise provider EA Global AI, says that workers pushing back in this manner shouldn’t come as a shock. “In many cases, what is being labeled as ‘sabotage’ is simply a rational human response to how AI is being introduced.”

He adds: “We’ve spent decades asking people to behave like robots – follow processes, fill forms in, and move data from one system to another. Now that the robots can finally do that work, we’re surprised that people push back.”

This view is echoed by the report, which shows that the main reason for the sabotage is that employees don’t want to be replaced by AI (30%). Tools diminishing employees’ value and creativity (26%) and adding to workloads (20%) were other cited reasons.

So, what can leaders do to prevent acts of sabotage from happening?

Be clear on what AI tools will and won’t do

For Radclyffe, the solution is fairly simple: “If your teams are resisting using the tools you adopt, or are using something else, it’s telling you something, so I’d suggest listening. Either the technology isn’t fit for purpose, or the incentives are broken. If you fix those, adoption tends to resolve itself.”

Leaders also need to communicate to their employees that AI is more than a “tooling upgrade”, he adds. If there are implications for roles, then they ought to know.

Adam Gaca, managing director for UK&I at tech strategy adviser and tech partner Future Processing, echoes the importance of communication. “People are being encouraged to use AI more often, but they don’t always have a clear view of where it actually improves outcomes or how their work will be evaluated. In this situation, switching tools, ignoring recommended solutions, or working around the official setup is a fairly natural response,” he says.

“Leaders need to define where AI will be applied, how results are evaluated, and how teams are expected to work with it on a day-to-day basis.”

This will give them reassurance and confidence and means they’d be less likely to push back against rollouts. “Once that’s in place, adoption becomes more consistent and behavior settles naturally,” he adds.

Empower through AI governance

The biggest risk of employees using unauthorized AI tools in the workplace is undoubtedly shadow AI.

Data from the Writer and Workplace Intelligence survey shows 76% of 1,2000 C-suite executives are aware of the dangers posed by AI sabotage and how it could threaten their company’s future. When employees choose to bypass internal AI guardrails and reject approved tools in favor of unauthorized ones, they increase the risk of shadow IT. Nefarious actors can use the unauthorized tools as a backdoor to exploit unpatched systems, leak data, and expand the attack surface.

“Shadow AI often occurs because the approved tools aren’t very good. People will always gravitate towards whatever helps them get the job done faster and better,” says Radcylffe.

The onus is on leaders to establish governance frameworks outlining what constitutes improper use of AI tools and how sensitive data should be handled. Oliver Simonnet, lead cybersecurity researcher at cybersecurity and AI usage control platform CultureAI, says that employees will often avoid approved tools and seek alternatives because “governance has become a blocker rather than an enabler”. In other words, employees are wary of the unknown and need to be empowered to use the approved AI tools.

Leaders should start by positioning AI training for governance compliance – this has been a legal requirement in the EU since 2025, but isn’t yet in the UK – as a career development and learning opportunity, as opposed to a box-ticking exercise. They should also recognize employees for responsible use of approved tools and incentivize them to flag possible bias, hallucinations or data leaks. For example, cash bonuses and rewards could be tied to compliance behaviors.

Ultimately, leaders need to show to employees that the AI tools are being implemented for their benefit and not to their disadvantage. “If employees see AI governance as something that helps them do their jobs better, adoption accelerates. If they see it as something that slows them down, they'll find a way around it,” Simonnet adds.

Place trust in employees

While putting guardrails in place is crucial to prevent the use of unauthorized tools in the workplace, companies shouldn’t necessarily put a blanket ban on tools that sit outside of company policy.

If the above has been followed, then employees shouldn’t fear AI tools being adopted. As a result, it’s less likely they’ll sabotage rollouts, and they should be more inclined to use the tools responsibly and take care to protect sensitive data. They should be trusted to use tools outside of company policy outside of the workplace if they help them to produce better work.

As Ash Gawthorp, CTO at tech consultancy Ten10, puts it: “Trust plays a huge role in whether people engage. People are more likely to engage when they can see how changes support better ways of working and understand the role they continue to play.”

Databricks has released an AI coworker for business teams, including marketing, finance, and sales.

Genie One, available on the web, iOS, and Android, is designed to automate work, answer questions, and take action using structured or unstructured, analytical or operational company data.

Visual interfaces include interactive charts and graphs, and teams can set up alerts for always-on monitoring, schedule tasks, create repeatable skills, and take action with MCP tools.

The product is based on the newly-launched Genie Ontology, which, said the firm, brings together an organization's entire data. It's a self-improving context layer that automatically extracts and continuously updates business knowledge from Databricks, as well as AI tools and connected workplace apps.

It can access curated, authoritative data through SQL, rather than having to reason from fragments spread across documents, said the firm.

"Most enterprise AI today is just guessing with false confidence. That is not good enough for business. If you're a CFO and AI can't tell you why margins changed, or you're a sales leader, and it can't find your next upsell, that's not an AI problem, that's a context problem," said Ali Ghodsi, co-founder and CEO of Databricks.

"Genie Ontology continuously learns context from data everywhere, so our answers are much faster and our agents are more accurate. That's the difference between an AI chatbot and an agentic coworker who knows your business inside out – every metric, every data source, every answer."

Genie connects to all major AI tools, said Databricks, as well as more than 50 popular apps and data systems for business users across databases, files, tickets, chats, and meetings. Integrations include Google Drive, Jira, Slack, Confluence, SharePoint, and more.

It can, said the firm, retrieve real answers from governed data and take action, with higher accuracy, reduced latency, and lower costs. And with Genie Agents and Genie App Builder, teams across the business can create reusable agents and applications – all connected to their data with access controls, permissions, and cost governance built in.

Genie Agents allow teams to save any Genie conversation as a reusable agent that inherits the conversation's memory, including its sources, instructions, and behavior, so coworkers can repeat trusted workflows across teams. Staff can also create and share agent skills with teammates for consistent, repeatable answer formats and workflows.

Genie App Builder, meanwhile, is a fully managed vibe coding environment built for the enterprise. Teams can upload business context, with Genie App Builder generating a live build plan and working app preview connected to real, governed enterprise data. These applications – built for internal teams or customers – have Unity Catalog permissions and access controls built in from the start.

Genie Code is an AI agent that helps data teams plan, build, and run data engineering, machine learning, and analytics workflows, and now includes a dedicated workspace to track progress, review steps, and easily switch between threads to work across projects.

And Genie ZeroOps is a new background agent built into Databricks that autonomously monitors, investigates, and proposes fixes for data and AI assets such as pipelines, jobs, tables, ML models and more.

"At Foot Locker, Genie Agents are transforming how we lead. They provide our executives and business teams with a centralized space to harness AI-driven insights across every North American banner we operate," said Krish Lakshminarayanan, VP, AI, data & analytics, enterprise architecture at Databricks customer Foot Locker.

"As we scale Genie to the enterprise, it's reshaping the way our business interacts with data and makes the decisions that matter most."

Gartner has warned that organizations are facing mounting competition for AI talent in supply chain roles, as demand ramps up for workers with both domain expertise and AI skills.

According to the analyst firm's latest research, demand for supply chain positions requiring AI capabilities increased by 387% between the first quarter of 2023 and the first quarter of 2026 – significantly outpacing growth across the wider labor market.

The findings arise from Gartner's analysis of more than 35 million job postings, including almost 600,000 vacancies across the supply chain. The company said this sharp increase in demand is creating a wide talent gap, with organizations facing longer recruitment timelines and rising hiring costs as they compete for a limited pool of qualified candidates.

"The demand for AI skills in supply chain is accelerating at a rate that far exceeds the broader labor market, creating a widening talent gap that organizations cannot close through hiring alone," explained Tess Frenzel, director analyst in Gartner's supply chain practice.

Demand was found to be particularly concentrated among experienced professionals, with 58% of AI-related supply chain roles sitting at the mid-senior level. Director-level positions are also overrepresented, the firm added, highlighting a need for experienced professionals capable of combining domain expertise with AI skills.

Addressing the imbalance

The findings build on previous Gartner research that highlighted the need for chief supply chain officers (CSCOs) to shift to an autonomous-ready workforce with versatile roles that guide and improve AI systems.

With its latest data, the analyst firm said organizations must now also look beyond traditional recruitment strategies as they seek to build and evolve their AI capabilities. Instead, CSCOs are advised to prioritize internal upskilling of staff while making greater use of entry-level talent to establish a sustainable pipeline of AI expertise.

Despite entry-level roles representing a significant proportion of overall hiring activity, Gartner noted that these positions represent a much smaller share of roles requiring AI skills – highlighting an opportunity for organizations to develop talent internally.

"CSCOs should take a balanced approach by accelerating internal upskilling and more effectively leveraging entry-level talent to build a sustainable pipeline of AI capabilities," added Frenzel.

"Organizations that invest in both experienced professionals and emerging talent will be better positioned to scale AI adoption and prepare their workforce for the future of supply chain."

Small and midsize businesses (SMBs) in the UK have doubled their use of AI tools over the last year, according to Google Cloud.

That includes Google's Gemini models but also Gemini Enterprise and AI Studio, said Maureen Costello, vice president for UK and Ireland at Google Cloud, in a blog post.

Costello said that the UK's five million-plus SMBs were the backbone of its economy. "Now, we're seeing these critical businesses begin to put AI to work, in order to operate more efficiently, move faster, and ultimately deliver better outcomes for their customers," she wrote.

She added: "At Google Cloud, we have a front row seat to this shift: SMBs have long utilized platforms like Google Workspace, and today, they're transforming with Google AI."

Partner bookings grew more than 100% last year, and the company told ITPRO that its partners contributed nearly 80% of Google Cloud's incremental revenue growth last year.

SMB struggles

Companies of all sizes have struggled with the AI rollout, in particular as return on investment (ROI) has proven elusive – a problem as costs of AI have started to rise.

Earlier this year, OpenAI said that SMBs were finding success with AI tools, though take-up remained sluggish in some parts of the UK. While more than nine in ten London-based SMBs were using AI, that was true of just one quarter in Yorkshire and Humber.

Microsoft noted that fear of falling behind was driving record adoption rates among UK businesses, with 84% now using AI for competitive advantages, versus 40% in 2025.

How SMEs use AI

According to Costello, SMBs have turned to AI for customer support, to automate repetitive actions in payroll and accounting, and to leverage data at work – without training to become data scientists.

She added that AI is helping smaller companies "rapidly create and implement new designs" for marketing. Smaller companies are also starting to let employees build their own AI agents for their day-to-day work.

She points to fintech Neural Alpha, which is using Gemini to read unstructured reports to automate digging out key facts, while security firm Sep 2 has developed autonomous AI agents for always-on threat modelling using Gemini Enterprise.

Design agency Sunhouse turned to Gemini Enterprise to hunt through its archives that are stored on Google Drive, events company Terrapinn automated manual tasks, and telecoms provider used Google Cloud AI tools to build autonomous workflows and make better use of data.

Google Cloud for British Business

Google pointed to a new set of resources designed to help smaller businesses navigate the new AI world.

That includes a new SMB Learning Path and Gemini Enterprise Agent Ready programme, which offers specialised agentic AI training. There's also Google Skills for Organisations, a free, on-demand learning platform that pulls together 3,000 AI courses, as well as Google's own certification platform.

"Whether you want to train your existing technical teams or democratize data tools across your entire workforce, these programs will help you build an AI-ready organization," said Costello.