Cloud account hijacking and spear-phishing emails have long been a concern amongst corporate security teams. Even with tools like multi-factor authentication and spam filters, malicious actors often uncover ways to either break into employee cloud accounts and attempt to persuade unwitting users to share sensitive details. Thankfully–up until now–there’s usually been a few tell-tale signs […]
Data security news & resources
SaaS security best practices: the ultimate guide
In this guide, we’ll explore the best practices for securing SaaS applications, from understanding key threats and the vendor landscape to building a culture of data protection. By delving into the nuances of SaaS security, you’ll be better equipped to navigate the complex landscape of cloud-based threats and maintain robust defenses against potential vulnerabilities. What […]
National Public Data breach: 3 million records leaked
Nearly 2.7 billion records containing personal information of individuals in the United States were leaked on a hacking forum, exposing sensitive data such as names, social security numbers, all known physical addresses, and potential aliases. Here’s what we know so far. National Public Data: Background The data reportedly originates from National Public Data, a company […]
Machine learning: the secret to effective data loss prevention
Data loss prevention (DLP) has a noise problem. Despite security teams carefully programming their solutions to catch sensitive data, most DLP tools alert them to benign instances—and lots of them. The reason? Regular expressions. Once the cornerstone of DLP, regular expressions have become outdated for the modern, cloud-based world. They cause inconsistent, inconsequential, inordinate amount […]
Everything you need to know about LLM DLP
Large language models (LLMs) are rapidly reshaping the workplace—tools like ChatGPT are revolutionizing marketing, while AI-driven predictions are transforming healthcare. The benefits are significant, but so are the risks. LLMs thrive on data, analyzing, logging, and storing every piece of information your employees share within their expansive neural networks. You might assume your current data […]
Anatomy of the CrowdStrike outage: Lessons learned
Last Friday, a wave of digital disruptions swept across the globe as Microsoft users found themselves facing an unexpected and severe issue: their computers simply refused to power on. This seemingly small glitch spiraled into a global crisis, causing major television networks to go dark, disrupting air travel with mass flight cancellations, and forcing countless […]
Are malicious insiders lurking in your SaaS apps?
The recent Disney data breach highlights the ever-present risk malicious insiders present to organizations–especially in the cloud-based working world. Whether on Microsoft Teams, Slack, or Google Workspace, almost all employees now rely on SaaS apps to carry out their work. In the process, they’re sharing, uploading, and downloading plenty of workplace data. For the most […]
Disney data breach: Threat actors hijack internal Slack channels
A hacktivist group has leaked over one terabyte of data from Disney’s internal Slack channels. Here’s everything we know so far. Who’s responsible? The attacker group is calling itself NullBulge. They allege that they stole 1.1 TiB of data from 10,000 internal Disney Slack channels. “1.1TiB of files and chat messages. Anything we could get […]
The top use cases for DLP
If you think DLP is a tick-box for compliance, you need to think again. This powerful security technology can help organizations with a myriad of cybersecurity woes: data breach prevention, human error, employee training, and much more. Here, we’ll explore the use cases of DLP in further detail, and explain why not all DLP solutions […]
HubSpot cybersecurity incident: What to do
HubSpot was in the hot seat this weekend after rumors started circulating that the company suffered a cybersecurity attack. Here’s everything you need to know. What happened? On Friday 28th June, IT publication TechCrunch caught headwinds of a cybersecurity incident at HubSpot. They reached out to the company’s CISO for further details. Here’s what the […]
How to create a data loss prevention policy
Every organization deals with mountains of data daily, and ensuring this data is managed correctly and securely is not just best practice—it’s a legal imperative. Mishandling data can lead to severe penalties and even catastrophic damage to your business. Think about it: data often includes personal, financial, or highly sensitive information like medical records. Protecting […]