Desktop Consulting Services

https://thehackernews.com/2026/05/tanstack-supply-chain-attack-hits-two.html?_m=3n%2e009a%2e3979%2eoo0ao45sbb%2e3148

This is a good example of why Cybersecurity is not a one-product setup-and-forget-it discipline. I have worked with clients that do the initial investment in resources but do not invest in the day-to-day.

TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates Mini Shai-Hulud hit 2 OpenAI devices via TanStack, exposing limited credentials and forcing macOS certificate updates by June 12, 2026.

Nicole brings up some valid points. We are pushing our clients and organizations to adapt technology that is sometimes not as advertised. There needs to be some risk analysis, metering and governance in the use of AI for automation.

‘LLMs are unreliable delegates’: Microsoft researchers say you probably shouldn’t trust AI with work documents A research paper from Microsoft shows AI degrades documents over longer workflows

https://dcs-mi.com/what-is-shadow-ai-and-why-it-puts-your-business-at-risk

What Is Shadow AI – And Why It Puts Your Business at Risk - Desktop Consulting Services Shadow AI isn’t a technology problem — it’s a governance problem. Small businesses don’t need massive budgets or complex frameworks. They need: Clear rules Approved tools Practical training A culture of safe innovation