Data security news & resources

This week, Landmark Admin, an insurance administrative services company, disclosed that a data breach stemming from a cyberattack in May has affected over 800,000 individuals. In a filing with the Maine Attorney General’s office, Landmark reported detecting suspicious activity on May 13, 2024. In response, the company promptly shut down its IT systems and remote […]

Security leaders are well aware of the challenges posed by generative AI: concerns around data leaks, AI-driven cyberattacks, phishing schemes, and ethical implications often dominate SOC discussions. While these risks are significant, focusing solely on the threats presented by generative paints an incomplete picture. Generative AI is not just a dark force—it holds tremendous potential […]

On October 9, 2024, visitors to the Internet Archive were met with a startling message. A pop-up on the site’s main domain warned of a “catastrophic security breach,” sending ripples through the digital preservation community. For those unfamiliar, the Internet Archive is a cornerstone of the web’s memory, founded in 1996 by Brewster Kahle. This […]

Data loss prevention (DLP) technology is often viewed solely through the lens of safeguarding sensitive information from unauthorized access or breaches. However, its role extends far beyond data protection—it plays a pivotal role in identifying and managing broader organizational risks. Here, we’ll look at the crucial role DLP should play in your enterprise risk assessments.  […]

The cloud storage service Dropbox is used by over 17.2 million individuals and organizations worldwide. This SaaS platform makes it easy to store, manage, and collaborate on documents from anywhere, on any device.  However, despite its popularity, Dropbox has a checkered past when it comes to data privacy and security. Here, we’ll look at Dropbox’s […]

On March 29, 2024, the California Privacy Rights Act (CPRA) will come into effect, marking a new era of data privacy requirements for businesses operating in California.  The CPRA aligns California’s data privacy regulations more closely with the European Union’s General Data Protection Regulation (GDPR), putting stringent expectations on companies regarding how they collect, use, […]

Medium and large organizations that operate in the European Union (EU) have just months to comply with NIS2, the EU’s latest and most stringent piece of cybersecurity legislation yet.  Here, we’ll explore how data loss prevention (DLP) can help businesses meet NIS2 compliance requirements before the October deadline.  Key focus areas of NIS2 NIS2’s requirements […]

The National Institute of Standards and Technology (NIST) has released the latest iteration of its renowned Cybersecurity Framework (CSF), designed to help organizations mitigate cybersecurity risk.  The new CIST CSF 2.0 is aimed at organizations of all sizes in all sectors. What’s new in the NIST CSF 2.0?  NIST initially released the CSF in 2014 […]

Organizations operating in the European Union (EU) must make important security strides in the next few months because the second iteration of the Network and Information Security directive (NIS2) will become part of law across EU member states in October.  NIS2 introduces stringent cybersecurity requirements for medium and large-sized organizations in certain sectors that operate […]

Authors: Yasir Ali & Armando Pauker As we start 2024, the enterprise realm is witnessing a transformative wave with the escalating adoption of artificial intelligence (AI). This surge in AI integration, stretching across many industries, brings with it a critical focus area: heightened data security risks and the looming threats of data breaches. As businesses […]

Houston, we have a problem. NASA may have put men on the moon, but its privacy program is in need of some rocket fuel.  That’s according to the aerospace agency’s Office of Inspector General (OIG), who recently reviewed NASA’s privacy program and found its data loss prevention (DLP) approach to be astronomically lacking.  In an […]