Montana’s new “right to try” law can’t come soon enough for some

What happens when the cutting edge of biotechnology moves faster than the regulatory frameworks designed to protect us?

In this compelling case, Kris DeVault faces a race against time for his son Brody, who developed severe developmental delays diagnosed via genetic testing. Facing limited options, families like the DeVaults look toward Montana’s expanded “Right to Try” legislation, which grants terminally or severely ill patients permission to access experimental, non-FDA-approved therapies.

From an advanced systems and tech governance perspective, this scenario mirrors the classic *Collingridge Dilemma* in technology policy: regulating early-stage innovation is difficult because outcomes are uncertain, but waiting until full data maturity can mean catastrophic delays for end-users. Here, society clashes over the *Precautionary Principle* versus dynamic, agile access to experimental bio-data and personalized therapeutics.

While bypassing traditional, multi-phase trial safety protocols offers immediate hope, it raises profound ethical questions for tech and medical infrastructure: Does decentralized access to unverified treatments jeopardize empirical safety standards and data integrity, or is strict centralized regulation an outdated bottleneck in the age of rapid genetic engineering? How should future health-tech systems balance real-time algorithmic risk assessment with fundamental human compassion?

當前沿生物科技的演進速度遠超監管框架的更新步伐,我們該如何在風險控制與拯救生命之間取得平衡?

本文探討了 Kris DeVault 為其幼子 Brody 尋求一線生機的艱難歷程。Brody 在基因檢測後被診斷出患有罕見的基因缺陷與嚴重發育遲緩。面對傳統療法的局限,這類家庭正寄望於蒙大拿州新通過的「試用權」(Right to Try)法案,該法允許患有重症的個體提早接觸未經完整官方審批的實驗性醫療技術。

從資訊系統與科技治理的角度來看,這完美契合了科技政策中的「科林格里奇困境」(Collingridge Dilemma)——新興技術早期的風險難以精確估算,但若等到數據完全驗證,往往已錯失最佳救治時機。這背後是傳統「預防原則」(Precautionary Principle)與現代「敏捷迭代」開發邏輯的深度碰撞。

繞過嚴格的臨床試驗流程,固然為個體提供了救命的可能,但也帶來了嚴峻的思考:在缺乏完整數據集驗證的情況下開放實驗性療法,究竟是賦權於患者,還是將系統性風險轉嫁給個體?未來的生醫資訊系統又該如何在數據安全、倫理審查與人道救助之間建立動態平衡?

#Biotech #Bioethics #RightToTry #ITProTutor

Source: MIT Technology Review

https://www.technologyreview.com/2026/07/31/1140945/montanas-new-right-to-try-law-cant-come-soon-enough-for-some/

Cyber-attackers take 607,000 records from Department for Education

🚨 Imagine handing over the personal data of over 600,000 citizens to unknown cybercriminals overnight. The UK Department for Education (DfE) recently confirmed a massive cyber-attack compromising 607,000 records, prompting joint investigations with the National Cyber Security Centre (NCSC) and the National Crime Agency (NCA).

From an IT governance perspective, this breach represents a critical breakdown of **Confidentiality** within the classic CIA Triad. Public sector institutions hold immense repositories of Sensitive Personally Identifiable Information (SPII), making them high-value targets. However, this raises a fundamental question: Why do large public institutions continuously struggle to implement basic security frameworks like **Zero Trust Architecture (ZTA)** and the **Principle of Least Privilege (PoLP)**?

Relying solely on legacy perimeter defense without micro-segmentation means a single compromised credential can trigger catastrophic data exfiltration. Security cannot remain a reactive patch; it must be an architectural priority.

🤔 **Key questions for tech professionals and leaders:**
1. Is your organization viewing cybersecurity as a product to buy, or a continuous governance architecture?
2. How can public sector entities balance rapid digital transformation with legacy system security?

Data breaches aren’t just technical glitches—they are failures of risk management principles. Let’s discuss in the comments below!

🚨 想像一下,一夜之間有超過 60 萬名公民的個人資料落入網路攻擊者手中。英國教育部(DfE)近期證實遭逢重大資安事件,高達 60.7 萬筆記錄遭外洩,目前正與國家網路安全中心(NCSC)及國家犯罪調查局(NCA)全力展開調查。

從 IT 導師與資安治理的角度來看,此事件代表了經典 **CIA 鼎立模型(CIA Triad)** 中「機密性(Confidentiality)」的嚴重失守。公共部門掌握大量高價值的個人敏感資料(SPII),向來是威脅者的首要目標。然而,這引發了一個值得深思的問題:為何大型機構在落實 **零信任架構(Zero Trust Architecture, ZTA)** 與 **最小權限原則(Principle of Least Privilege, PoLP)** 時總是步履維艱?

若組織仍依賴傳統的邊界防禦而缺乏微隔離機制,一旦單一憑證遭突破,資料便可能面臨大規模外洩。資安不該只是事後的補救措施,而必須是主動的架構設計。

🤔 **給 IT 專業人員與管理者的思考議題:**
1. 您的組織是將資安視為購買防護工具,還是將其融入整體治理架構?
2. 面對舊型系統(Legacy Systems)的包袱,公部門該如何平衡數位化轉型與防護強度?

歡迎在下方留言分享您的觀點!

#CyberSecurity #DataBreach #ZeroTrust #ITProTutor

Source: BBC

https://www.bbc.co.uk/news/articles/cq6dmgrp21po?at_medium=RSS&at_campaign=rss

Forward-deployed engineers are the AI industry’s latest talent obsession

Is your organization chasing the AI dream without the right architects to actually build it? TechCrunch reveals a critical industry bottleneck: a recent study estimates that only 2,000 U.S. engineers possess the expertise required to drive meaningful AI return on investment (ROI). Consequently, enterprises are in a high-stakes race to recruit “Forward-Deployed Engineers” (FDEs)—specialists capable of bridging sophisticated machine learning models with real-world enterprise operations at scale.

This talent scramble exemplifies Amara’s Law: we tend to overestimate the short-term impact of AI technology while underestimating the human infrastructure required to operationalize it. The obsession with FDEs indicates that raw model power is no longer the primary constraint; domain integration and enterprise readiness are. Furthermore, through the lens of Conway’s Law—which posits that system designs mirror organizational communication structures—deploying FDEs as quick-fix “firefighters” may temporarily patch technical gaps, but it won’t resolve underlying architectural and cultural inefficiencies.

Are enterprises creating a risky dependency on a tiny elite of savior engineers instead of systematically upskilling their existing workforce? How is your organization preparing its engineering culture to translate raw AI capability into sustainable ROI? Share your thoughts below!

您的企業是否正在盲目追逐 AI 浪潮,卻缺乏能真正落地執行的關鍵架構師?根據 TechCrunch 的最新報導,全美估計僅有約 2,000 名工程師具備為企業創造實質 AI 投資報酬率(ROI)的專業能力。這引發了對「前線部署工程師」(Forward-Deployed Engineers, FDE)的爆發性搶奪戰——這些專業人才正是將高深機器學習模型推向企業級規模化落地的關鍵橋樑。

這個現象完美印證了「阿馬拉定律」(Amara’s Law):我們往往高估了 AI 技術的短期影響,卻低估了將其工程化所需的長期人力基礎設施。對 FDE 的瘋狂需求表明,當前 AI 發展的瓶頸已非模型本身的能力,而是企業的吸收與實務整合能力。若從「康威定律」(Conway’s Law)的角度審視,系統設計反映了組織的溝通結構——若企業僅將 FDE 當作外包「救火員」,而非戰略級賦能者,終究無法翻轉傳統架構的本質缺陷。

企業是否正在過度依賴少數「救世主」工程師,而忽視了既有團隊的技能升級?您的團隊又該如何跨越從 AI 概念驗證(PoC)到商業可持續價值之間的鴻溝?歡迎在下方留言分享您的觀點!

#AIEngineering #TechTalent #DigitalTransformation #ITProTutor

Source: TechCrunch

https://techcrunch.com/2026/07/30/forward-deployed-engineers-are-the-ai-industrys-latest-talent-obsession/

A fundamental flaw leaves LLMs strikingly vulnerable to attack

Is absolute security in AI just an illusion, or are we fundamentally misdiagnosing how LLMs process information?

A landmark paper presented at the International Conference on Machine Learning (ICML) reveals a sobering truth: Large Language Models (LLMs) possess an inherent, unfixable architectural flaw that leaves them perpetually vulnerable to adversarial attacks and prompt injections. Because LLMs compute system instructions and untrusted user inputs within the exact same data channel, they violate the foundational cybersecurity norm of **Control Plane and Data Plane Separation** (Saltzer and Kaashoek principle). Consequently, current safety guardrails like RLHF act merely as temporary patches rather than structural cures.

As IT professionals and system architects, this forces a critical paradigm shift: Are we building next-generation enterprise pipelines on a foundation of sand? If algorithmic alignment is mathematically impossible due to the probabilistic nature of transformer architectures, should we abandon the pursuit of “foolproof models” and pivot strictly toward Zero Trust execution environments and blast-radius containment? How is your organization preparing for the inevitable moment when your LLM’s safety boundaries fail by design?

我們是否正在將企業的未來,建立在無法被徹底安全的 AI 架構之上?

本月於機器學習頂級會議 ICML 發表的一項重磅研究指出:大型語言模型(LLM)存在無法根治的根本性缺陷,使其天生易受對抗性攻擊與提示詞注入防不勝防。由於 LLM 在同一個管道中處理系統指令與未信任的用戶數據,這直接違背了資訊安全最經典的**控制面與數據面分離原則(Control and Data Plane Separation)**。這意味著現有的安全微調(如 RLHF)只是治標不治本的補丁,無法達成真正的結構性免疫。

作為 IT 專業人員,這項發現迫使我們深度反思:當對齊理論(Alignment Theory)遇上機率模型的底層限制,我們是否該放棄「完美防禦」的幻想,全面轉向零信任(Zero Trust)架構與隔離控制?當模型的安全邊界註定會被突破,您的企業架構準備好承擔衝擊了嗎?

#AISecurity #LLM #CyberSecurity #ITProTutor

Source: MIT Technology Review

https://www.technologyreview.com/2026/07/30/1140927/a-fundamental-flaw-leaves-llms-vulnerable-to-attack/

I’m torn by the hard hat v graduation cap debate. Is it wrong that I want my kids to go to university? | Emma Brockes

Is a four-year degree becoming obsolete in today’s fast-paced, skill-driven economy?

Emma Brockes’ latest commentary highlights a growing societal shift, amplified by politician Andy Burnham’s call to value practical vocational paths (“the hard hat”) just as much as traditional university degrees (“the graduation cap”). As an IT instructor, I witness this dynamic daily: self-taught developers, bootcamp graduates, and early apprentices are frequently entering tech careers faster, debt-free, and with more relevant skill sets than traditional computer science graduates.

This debate touches on economic **Signaling Theory** versus genuine human capital development. If a degree functions primarily as an expensive filtering mechanism rather than an up-to-date skills provider—especially in technology, where university curricula often lag years behind industry tools—its return on investment sharply declines. Yet, despite clear real-world success stories without degrees, deep-seated cultural norms leave many parents and educators experiencing intense anxiety when considering non-traditional routes.

Are we over-credentialing the next generation at the expense of practical agility? Should industry-ready certifications and portfolio projects replace degree requirements in high-tech fields? Would you encourage your own kids or students to skip university for direct industry entry? Share your thoughts in the comments below!

在高科技與技能導向的時代,傳統的大學學位真的還是職涯成功的唯一金鑰嗎?

專欄作家艾瑪·布洛克斯(Emma Brockes)探討了高等教育價值的轉變,回應政治家安迪·伯納姆(Andy Burnham)的提議——社會應同等重視實務技術(「安全帽」)與傳統學歷(「學士帽」)。身為 IT 導師,我在科技領域每天都看到這種範式轉移:許多透過自學、Bootcamp 或實習掌握實作能力的工程師,在沒有學貸負擔的情況下,職涯起跑甚至超越了傳統資訊系的畢業生。

從經濟學的**「信號理論」(Signaling Theory)**來看,若大學文憑僅是一種高昂的篩選機制,而非提供最新實用技能的場所——特別是在技術迭代速度遠超學校課程的 IT 領域——其投資報酬率必然大打折扣。然而,即便非傳統路徑的成功案例屢見不鮮,深植人心的社會常態仍讓許多家長在面對孩子放棄大學時感到無名焦慮。

我們是否過度追求學歷,卻犧牲了適應市場的實務能力?在快速變化的產業中,我們該優先看重名校光環還是實戰作品集?如果是你,會鼓勵孩子或學生放棄大學、直接進入職場嗎?歡迎在下方留言分享你的看法!

#HigherEducation #TechCareers #SkillsOverDegrees #ITProTutor

Source: The Guardian

https://www.theguardian.com/commentisfree/2026/jul/30/kids-university-andy-burnham-higher-education

Colin Fraser obituary

Can understanding social psychology unlock the next evolution in modern technology and IT mentorship?

We honor the legacy of Colin Fraser, an esteemed social psychology scholar at Churchill College, Cambridge, who passed away at 88. Over a 50-year career, Fraser profoundly shaped the discipline through foundational works on language and widespread beliefs, co-authoring landmark texts like *Introducing Social Psychology*. Celebrated for his dry Scottish humor and welcoming mentorship, he guided generations of scholars through the nuances of human behavior.

From an IT perspective, Fraser’s research on “widespread beliefs” and language deeply resonates with today’s challenges in algorithmic echo chambers, digital misinformation, and Large Language Models (LLMs). As technology architects, we often focus on system scalability while overlooking social dynamics. Applying Social Identity Theory and cognitive framing principles reminds us that software is never neutral—it operates within human social constructs.

How can IT engineers build resilient, bias-aware algorithms if they ignore the core mechanics of human belief formation? How do Fraser’s insights on social language influence how we approach Prompt Engineering and Human-Computer Interaction (HCI) today? Drop your thoughts below!

理解社會心理學,能否成為解鎖下一代人工智慧與資訊科技教學的關鍵密碼?

我們深切懷念劍橋大學丘吉爾學院知名社會心理學學者 Colin Fraser(享壽88歲)。在他長達50年的學術生涯中,Fraser 著有《社會心理學導論》等經典著作,對語言心理學和大眾信仰的研究做出卓越貢獻,並以幽默溫暖的導師作風培育無數領域精英。

從 IT 與資訊科技的角度來看,Fraser 對「廣泛信念」與語言溝通的洞察,完美契合了當前演算法同溫層、假訊息傳播以及大型語言模型(LLM)的發展瓶頸。正如「社會認同理論」(Social Identity Theory)所揭示,軟體與系統從不只是冷冰冰的程式碼,更是人類社會互動的延伸。

若軟體工程師忽視了人類信念形成的心理機制,我們該如何設計出能抵抗資訊偏見的抗威脅系統?Fraser 的語言社會心理學,又將如何啟發我們優化當前的 Prompt 工程與人機介面(HCI)設計?歡迎在下方留言,分享你的專業見解!

#SocialPsychology #TechMentorship #HumanComputerInteraction #ITProTutor

Source: The Guardian

https://www.theguardian.com/education/2026/jul/28/colin-fraser-obituary

Schools to offer technical subjects to pupils from age 14 in England, Burnham says

Are we finally bridging the gap between classroom theory and real-world tech innovation? England is expanding technical education, offering pupils as young as 14 specialized subjects like Artificial Intelligence, digital technologies, and advanced manufacturing tailored directly to local industry demands.

As an IT educator, I see this shift toward early technical integration as a vital evolution. Grounded in Constructivist Learning Theory, hands-on exposure at age 14 allows students to build deep cognitive schemas through authentic problem-solving rather than abstract rote learning. Aligning curriculum with regional skill shortages also addresses long-standing tech talent deficits. However, this initiative poses critical challenges: Do secondary schools possess the cutting-edge infrastructure and qualified tech educators needed to deliver industry-standard AI courses? Furthermore, does introducing vocational specialization so early risk narrowing a young learner’s foundational education, or will it empower a more adaptable workforce?

Should AI be taught as a specialized technical track at age 14, or integrated as a fundamental digital literacy requirement for all students? I’d love to hear your thoughts in the comments!

我們是否終於要打破傳統課堂理論與現實科技創新之間的藩籬了?英格蘭最新計畫提早從 14 歲(國中階段)起,向學生提供人工智慧(AI)、數位技術與先進製造等專業技術課程,旨在精準對接區域產業與在地就業需求。

身為 IT 專業講師,我認為這項技職教育前置的策略極具前瞻性。從「建構主義學習理論」(Constructivist Learning Theory)的角度來看,早期接觸實務導向的科技訓練,能讓學生在真實情境中建立深層的認知架構,而非僅限於抽象的課本知識。然而,提早在 14 歲引入 AI 等新興領域也引發了關鍵思考:中學是否有足夠的業界規格設施與專業師資來支援這些課程?此外,過早進行職業分流,是否會限制學生的全人基礎教育發展?

你認為 AI 應該在 14 歲時被劃分為專門的技職考量,還是應該作為所有學生必備的通用數位素養?歡迎在下方留言分享你的觀點!

#EdTech #AIEducation #FutureOfWork #ITProTutor
Source: BBC News

https://www.bbc.co.uk/news/articles/cj4k2djd5qpo?at_medium=RSS&at_campaign=rss

Cyera agrees to acquire Oasis Security for $1B to safeguard proliferating AI agents

Is your organization prepared for an army of autonomous AI agents quietly bypassing your traditional security controls?

Cyera has agreed to acquire Oasis Security in a massive $1 billion deal—marking its third strategic acquisition this year—to directly tackle the security risks of proliferating non-human identities (NHIs) and autonomous AI agents. As enterprise workflows increasingly rely on AI agents that execute complex operations independently, managing their secrets, dynamic credentials, and access permissions has become the ultimate cybersecurity frontier.

From an architectural perspective, this acquisition underlines the urgent need to extend **Zero Trust Architecture** and the **Principle of Least Privilege (PoLP)** to machine-to-machine interactions. Legacy Identity and Access Management (IAM) systems were designed for human employees, but today’s AI agents operate as highly privileged “shadow digital workers.” In the rush to adopt generative workflows, are we granting AI entities excessive API permissions without adequate governance? When an autonomous agent makes a dynamic API call, how does your SOC audit its behavioral intent and boundary breaches? Share your perspective and security strategies in the comments!

當自主 AI 代理(AI Agents)全面滲透企業系統,傳統的資安防線是否已形同虛設?

Cyera 宣布以 10 億美元收購 Oasis Security(這是該公司今年的第三筆戰略收購),旨在全力應對爆炸性增長之非人類身份(Non-Human Identities, NHIs)與自主 AI 代理所帶來的資安風險。隨著企業日益依賴能夠獨立執行複雜任務的 AI 代理,如何管理這些「數位代理人」的金鑰、動態憑證與存取權限,已成為企業資安的重中之重。

從資安架構的角度切入,這筆巨額交易凸顯了將**零信任架構(Zero Trust Architecture)**與**最小權限原則(Principle of Least Privilege, PoLP)**落實至機器與 AI 身份的迫切性。傳統的身份存取管理(IAM)多針對人類使用者設計,而現代 AI 代理卻如同擁有超高權限的「影子數位員工」。貴公司在追求自動化效益的同時,是否已無意間賦予了 AI 代理過高的 API 存取權限?當自主代理發生異常行為時,你的資安團隊是否有能力進行即時稽核與阻斷?歡迎在下方留言分享你的看法!

#Cybersecurity #AIAgents #ZeroTrust #ITProTutor

Source: TechCrunch

https://techcrunch.com/2026/07/28/cyera-agrees-to-acquire-oasis-security-for-1b-to-safeguard-proliferating-ai-agents/

Samsung’s chip workers are jumping ship to rival SK Hynix 

Is tech giant Samsung losing its ultimate competitive edge—its top engineering talent?

Recent reports reveal a striking trend: Samsung’s semiconductor engineers are switching off overtime to actively prepare job applications for key rival, SK Hynix. This shift highlights a growing talent drain within South Korea’s memory chip industry.

From an IT management perspective, the **Resource-Based View (RBV)** framework reminds us that human capital is a firm’s most irreplaceable strategic asset. In high-stakes tech sectors like semiconductors—especially during the AI-driven High Bandwidth Memory (HBM) race—losing skilled engineers directly compromises operational know-how and long-term innovation capabilities. When employees trade extra project hours for exit strategies, it signals deeper systemic issues in organizational culture and compensation alignment.

Is this exodus a warning sign of toxic workplace burnout, or a natural realignment in the AI chip war? How should tech leaders balance high-performance demands with effective talent retention? Share your thoughts below!

科技巨頭三星正在失去其最核心的競爭優勢——頂尖技術人才嗎?

最新報導指出,三星晶片部門的工程師正在改變「加班拚績效」的習慣,轉而利用下班時間準備履歷,甚至互相分享跳槽至競爭對手 SK 海力士(SK Hynix)的面試技巧。

從資訊科技管理學的**「資源基礎觀點」(Resource-Based View, RBV)**來看,高級工程師是企業最難以被複製與替代的策略性資產。特別是在 AI 驅動的高頻寬記憶體(HBM)競賽中,人才流失意味著核心技術能量與營運經驗的直接轉移。當員工寧願放棄高薪加班而選擇離開,這揭示了企業內部文化與激勵機制失效的重大警訊。

這場人才出走潮,究竟反映了企業文化的瓶頸,還是晶片霸權爭奪戰下的必然結果?作為科技業領導者,我們該如何在追求高產出的同時維持人才黏著度?歡迎在下方留言討論!

#Semiconductor #TalentRetention #TechLeadership #ITProTutor

Source: MIT Technology Review

https://www.technologyreview.com/2026/07/28/1140853/samsung-chip-workers-exodus-sk-hynix/

Schools to offer technical subjects to pupils from age 14 in England, Burnham says

Is introducing AI and technical skills to 14-year-olds the ultimate catalyst for bridging the modern tech gap, or are we hyper-specializing our youth too early?

England is preparing to offer technical subjects—such as artificial intelligence, digital skills, and advanced manufacturing—to pupils from age 14. Championed by regional leaders like Greater Manchester Mayor Andy Burnham, this initiative aims to forge a direct pathway between early secondary education and local employment opportunities.

From an IT education perspective, aligning curricula with industry needs reflects Constructivist Learning Theory, where students acquire deeper mastery by solving contextualized, real-world problems. However, in an era where software frameworks and AI paradigms shift annually, teaching specific technical tools to early teenagers carries a distinct risk of rapid skills obsolescence. Under the lens of Industry 4.0, true digital readiness requires broad adaptability rather than premature vocational specialization.

Are we building adaptable computational thinkers capable of leading future innovations, or simply training operational labor for immediate local industry demands? How can educators ensure that teaching applied AI at 14 does not compromise fundamental logical thinking and broad academic literacy? Share your thoughts below.

將 AI 與技術學科引進 14 歲學生的課堂,究竟是填補現代科技人才缺口的最佳良方,還是過早限制了青少年的發展可能性?

英格蘭計劃向 14 歲起的中學生提供包括人工智慧、數位技能與先進製造業等技術學科。這項由大曼徹斯特市長安迪·伯納姆(Andy Burnham)等領袖推動的政策,旨在建立早期中等教育與在地就業市場之間的直接橋樑。

從專業 IT 導師的角度來看,將課程與產業實務對接符合「建構主義學習理論」(Constructivism),即學生在具體且相關的情境中解決問題能達到最佳學習效果。然而,在 AI 技術與軟體架構快速疊代的當代,過早向 14 歲學生教授特定工具,面臨著技能迅速過時的風險。根據「工業 4.0」的人才發展架構,真正的數位競爭力來自於高適應力與底層邏輯,而非過早的職業技術分流。

我們究竟是在培養具備架構性「運算思維」的未來創新者,還是僅為當前在地產業提供短期的操作型技術人力?在 14 歲引入 AI 實務課程時,教育界該如何平衡底層邏輯能力與實用技術的比例?歡迎在下方留言分享您的看法。

#EdTech #AIEducation #FutureOfWork #ITProTutor

Source: BBC News

https://www.bbc.co.uk/news/articles/cj4k2djd5qpo?at_medium=RSS&at_campaign=rss