It’s October: the start of fall, the impending holiday season and, of course, cybersecurity awareness month. While you might not initially think thanksgiving, Black Friday and cybersecurity have much in common, there’s actually a lot to know about, especially when it comes to phishing. You see, there’s been a general trend in recent years of […]

Key findings from Cyentia Information Risk Insights Study
There’s a new kid on the block in the cybersecurity research sphere. The Cyentia Institute, a dedicated research center, has just released the third edition of its annual Information Risk Insights Study, abbreviated to IRIS. With support from the Cybersecurity and Infrastructure Security Agency (CISA), this year the study was bigger than ever, combining insights […]

A quick-start guide to data compliance for startups
It’s a well-known fact in the security community that compliance and privacy should be built into operations, software and culture from the ground up. While organizations that have been around for decades don’t have the luxury of doing this, startups are perfectly placed to bake in compliance from the outset. Curious how to do it? […]

Why does the $1.8B fine on US big banks make data loss prevention essential for all financial services firms?
This week, The U.S. Securities and Exchange Commission (SEC) hit more than a dozen banks with fines totaling almost $2 billion. The likes of Bank of America, Barclays, Morgan Stanley and more must pay $125 million each to the SEC for improper use of messaging apps, collaboration tools and other unauthorized services for communication, without […]

How did Slack lead to ‘Grand Theft Auto’ leak?
Gaming fans got an unexpected treat last weekend when in-development gameplay footage of the upcoming Grand Theft Auto (GTA) game was leaked online. No, this wasn’t an attempt by Rockstar Games—the publisher of GTA— to drum up anticipation for the pending launch. The company was hacked. And badly. The hacker managed to break into an […]

How to win at cybersecurity training for remote & hybrid employees
If you’re like most organizations with knowledge workers, you probably allow your employees to work remotely at least some of the time. This trend is on the rise and, by 2028, it’s expected that 75% of organizations across the world will enable hybrid and remote work. While the work-from-anywhere approach has its perks, it also […]

How did Uber’s Slack breach lead to leakage of database credentials?
Uber has been hacked by an 18 year old. Yep, you read that right. On the 15th September, tens of Uber employees received a Slack message from an unknown identity, stating “I am a hacker.” But that’s just the tip of the iceberg. The threat actor’s self-announcement was the final step in a lengthy data […]

The demise of email & the rise of in-SaaS communication presents unique data security risks
Until recently, email was the primary mode of communication in workplaces across the globe. Then, the pandemic hit and organizations quickly had to pivot their approach to collaboration. Enter cloud apps like Slack, Microsoft Teams and Google Workspace, which are perfect for rapid, remote communication amongst employees. Even now, as life returns to normal, these […]

Is employee & B2B personal data covered under the CPRA?
On August 31st, the California legislative session notably adjourned without the enactment of Assembly Bill 1102. This bill would have extended the exemption for the inclusion of employee and B2B personal data within the California Privacy Rights Act (CPRA). Without the exemption in place, compliance and governance around B2B and HR personal information will become […]

Slack for healthcare—Do’s, don’ts, & best practices
So, you’re a healthcare organization that’s started using Slack? Chances are, you want to help your employees communicate and collaborate more effortlessly, and you’ve heard on the grapevine that Slack is the collaboration tool to use. We’ve heard the same. Slack adoption is soaring. The company generated $902 million in revenue between March 2020 and […]

How to set up zero trust for your SaaS tech stack
Data loss has long been a challenge for organizations. Even in the good old days when company data was stored on-premises, worries about data loss kept IT and security leaders up at night. Today’s waking nightmare, of course, is the threat of data loss through SaaS applications and cloud infrastructure. In this environment, securing data […]