Account takeover (ATO) attacks are rising year after year, despite organizations investing heavily in multi-factor authentication. The reason? Cybercriminals’ tactics are evolving—and MFA is no match. Just take last month’s phishing attack targeting Microsoft ADFS. Hackers sent fake IT emails, tricking employees into logging into a cloned ADFS page. The moment victims entered their credentials […]
Data security news & resources
4chan data breach: What we know so far
4chan has been unreachable since early Tuesday, with users reporting widespread issues and outage monitoring websites lighting up with user complaints. Speculation is spreading fast across rival forums and social platforms about what’s going on. The leading theory? A massive hack. As background, 4chan is a controversial, anonymous message board that’s been online since 2003. […]
What are the security risks of DeepSeek?
The Chinese firm DeepSeek has officially entered the AI arena. When the company released its latest iteration in January of this year, it reached 16 million downloads in just 18 days—nearly double the 9 million downloads achieved by OpenAI’s ChatGPT at launch. Chances are, DeepSeek is already being used in your workplace, quietly boosting employee […]
How to build a human firewall in the cloud
As more organizations embrace cloud applications like Google Workspace and Microsoft 365, the security risks are escalating. In fact, 4 out of 5 companies have fallen victim to a cloud security breach in the last 18 months. While it’s easy to blame the cloud itself, the reality is more complex: these breaches are not typically […]
Generative AI: The ultimate insider threat?
Generative AI tools like ChatGPT and Bard are taking the world by storm—at a rate faster than security teams can keep up. Today, 78% of knowledge workers use third-party GenAI tools. Yet, just a third of organizations say they have defined guidelines on AI usage in place. As more and more corporate data flows into […]
X (Twitter) breach highlights the danger of insider threats
X (formerly Twitter) has suffered a catastrophic data breach, exposing the profile data of over 2.8 billion users. The breach came to light Tuesday when cybersecurity researchers discovered a 34GB CSV file posted on BreachForums, a notorious hacking message board. The file was uploaded by a user going by “ThinkingOne,” who claims the data was […]
Oracle Health data breach impacts hospitals across the US
ChatGPT said: Oracle Health is at the center of a major data breach impacting several U.S. hospitals and healthcare organizations. The breach, which originated from compromised legacy servers, has led to the theft of sensitive patient records. The attacker is now using ransomware to extort victims, demanding payments to prevent the stolen data from being […]
DSPM with DDR capabilities: The complete solution for modern data protection
In today’s world of constant data sharing and AI adoption, organizations face more complex threats than ever before. Traditional security tools simply can’t keep up. That’s why leading security teams are turning to data security posture management (DSPM) with data detection and response (DDR) capabilities—a powerful combination that provides both visibility and active protection. Why […]
DSPM vs CSPM: Why data security posture management is the future of cloud protection
As organizations move more operations to the cloud, security teams face a critical question: Is cloud security posture management (CSPM) enough, or do you need data security posture management (DSPM) too? The answer might surprise you. Understanding the difference: CSPM vs DSPM Cloud security posture management (CSPM) focuses on checking cloud infrastructure settings against security […]
SaaS security posture management: The missing link in your security strategy
Organizations are embracing SaaS applications at a lightning pace. But while these tools are excellent for driving collaboration and productivity, they also create significant blind spots in your security posture. With sensitive data flowing freely across platforms like Slack, Google Workspace, and Microsoft 365, traditional security approaches are simply no longer enough to prevent data […]
CMMC compliance made simple: How data security posture management streamlines your journey
For defense contractors and suppliers working with the Department of Defense, CMMC compliance is no longer optional—it’s a necessity. But with sensitive data flowing through multiple SaaS platforms, many organizations struggle with knowing where to start. The good news? Achieving CMMC compliance doesn’t have to be complicated. You just need the right tools in place. […]