Generative AI tools like ChatGPT are, without doubt, game-changers for businesses across sectors. But they also come with significant risks. Sensitive data shared with these AI models can quickly spiral out of control, leading to unintentional but costly data leaks. The result? Your business could be embroiled in a data breach before you even realize […]
Data security news & resources
What’s the difference between human risk management and security awareness training?
Security awareness training is often seen as the cornerstone of managing the human factor. The goal is simple: provide employees with enough information to recognize and avoid potential risks. These programs can take many forms, from posters that offer cyber hygiene reminders to more structured eLearning sessions designed to ensure every employee has completed necessary […]
Are malicious insiders lurking in your SaaS apps?
The recent Disney data breach highlights the ever-present risk malicious insiders present to organizations–especially in the cloud-based working world. Whether on Microsoft Teams, Slack, or Google Workspace, almost all employees now rely on SaaS apps to carry out their work. In the process, they’re sharing, uploading, and downloading plenty of workplace data. For the most […]
The role of data loss prevention in enterprise risk assessments
Data loss prevention (DLP) technology is often viewed solely through the lens of safeguarding sensitive information from unauthorized access or breaches. However, its role extends far beyond data protection—it plays a pivotal role in identifying and managing broader organizational risks. Here, we’ll look at the crucial role DLP should play in your enterprise risk assessments. […]
Active learning: The next frontier of cybersecurity awareness training
Today’s organizations are investing in cybersecurity controls and technologies more than ever before. It’s easy to understand why. Data breaches and compliance fines aren’t just inconveniences in the modern world of business. They’re potential points of failure. A wide scale security incident can completely erode customer trust and the bottom line, putting some organizations out […]
Navigating Zendesk vulnerabilities: Risks and remediations
In today’s ultra competitive digital landscape, businesses need to ace their customer service offering to attract, win, and retain customers. In fact, McKinsey research shows that investing in the customer experience (CX) can improve sales revenues by up to 7% and profitability by up to 2% in just one year. To enhance the CX, many […]
A comprehensive guide to Google Drive vulnerabilities
Organizations large and small rely on Google Drive and the Google Workspace ecosystem for a range of collaboration and document-based tasks. The cloud-based platform is highly intuitive to use and accessible from any device with the right login credentials, making it an excellent option for hybrid and remote teams. However, Google Drive’s usability can also […]
Elevating cybersecurity awareness training with AI-driven nudges
In 2024, human error continues to be the number one cause of data breaches, leaks and compliance fines in the enterprise. Despite organizations consistently investing in cybersecurity awareness training, something is going amiss: employees aren’t learning. For CISOs and their teams, the fallout of ineffective training programs can be severe. Many training initiatives are expensive, […]
Verizon insider data breach
Telecommunications and media giant Verizon suffered a data breach impacting over 60,000 employees after one employee gained unauthorized access to sensitive files containing personally identifiable information. How did the Verizon data breach happen? According to a data breach notification shared with the Office of the Maine Attorney General, a Verizon employee “inappropriately handled” a file […]
NASA’s DLP program fails to lift off
Houston, we have a problem. NASA may have put men on the moon, but its privacy program is in need of some rocket fuel. That’s according to the aerospace agency’s Office of Inspector General (OIG), who recently reviewed NASA’s privacy program and found its data loss prevention (DLP) approach to be astronomically lacking. In an […]
How to shine a light on shadow AI
Generative AI is like the Internet of the late 1990s. It’s going to completely reshape the business world, and make employees way more productive, innovative, and efficient. In fact, already, Nielsen Norman Group has found that employees using generative AI tools like ChatGPT perform 66% better than those who don’t. There’s just one problem. A […]