Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The latest News and Information on Data Security including privacy, protection, and encryption.

Now Available: AI-Powered Data Loss Prevention for Microsoft Exchange Online

Organizations investing in Microsoft 365 E5 licensing expect enterprise-grade email protection. Yet despite premium security features, customer feedback reveals persistent challenges with Microsoft Purview DLP across Exchange Online environments. Microsoft deployment specialists report seeing clients deploy Purview on their own, discover a wealth of false positives, and turn off the policies or set them to audit mode. Policies never become useful.

The Missing Layer: Email Protection That Exchange Online and Gmail Users Urgently Need

In our previous blog (Beyond Attachments: How Email Becomes Your Biggest Data Exfiltration Vector), we exposed the critical gaps in standard email data loss prevention (DLP) tools that allow data exfiltration to continue despite significant investment in native controls. Organizations that have implemented targeted solutions to address these gaps report dramatic improvements in their security posture. Here's what comprehensive email DLP actually looks like in practice.

Old Data: Are You Keeping Too Much? Incident Response Risks! #appsec #cybersecurity

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Beyond Attachments: How Email Becomes Your Biggest Data Exfiltration Vector

Your Microsoft 365 and Google Workspace security dashboards show green across all metrics. You've implemented data loss prevention policies, enabled advanced threat protection, and your team regularly audits security logs. Yet sensitive data continues to leave your organization through email channels. Why? Because attackers and even non-malicious insiders aren't using the obvious exfiltration techniques your tools were built to detect.

Safeguarding Sensitive Data in the Digital Age: The Evolution of DLP

In today’s interconnected world, data has become the lifeblood of business success, driving innovation, customer engagement, and operational efficiency. As organizations embark on rapid digital transformation, the proliferation of cloud computing and mobile devices, stringent privacy regulations such as GDPR and CCPA, and the rise of disruptive technologies like AI all play a key role in guiding the direction.

Enabling Safe AI Adoption: Insights from Nightfall AI and Vanta

How should data security teams walk the fine line between enabling AI innovation, safeguarding sensitive data, and ensuring compliance? That question drives everything we build at Nightfall. It’s also an excellent jumping off point for an in-depth discussion among security experts.

Cybercriminals Use Telegram Bots to Exfiltrate Data In Phishing Kit Campaign

KnowBe4 ThreatLabs has identified and analyzed a sophisticated cross-platform phishing campaign that utilizes Telegram as its primary exfiltration channel. The campaign uses a combination of security-themed phishing emails, branded phishing websites to harvest credentials, and Telegram bots to exfiltrate data.

Top tips: AI is coming for your data...unless you act first!

Top tips is a weekly column where we highlight what’s trending in the tech world and list ways to explore these trends. This week, we’ll explore how to prevent our data from being used by AI. The internet remembers everything. The album you posted on Facebook seven years ago, the silly blog you published when you were in school, the memes you liked, the videos you viewed—everything is etched onto the internet. You may forget, but the internet remembers.

Protecting Intellectual Property in Life Sciences: The Gravity of Data Security

Among many vital elements of its growth, the life science industry thrives on intellectual property. That includes information on everything from groundbreaking drug discovery to clinical trials and medical devices. Protecting such data goes beyond technical challenges, and it’s one of the industry’s basic necessities. Yet, both aspects must be adequately addressed.

The Importance of Data Cleaning After Scraping

Internet data extraction provides critical capabilities to businesses and research teams and software developers who demand current information. A major drawback of website data scraping is disorganized along with inconsistent and incomplete raw data stores. The value of gathered data becomes negligible when cleaning processes are omitted from the retrieval process. Clear recognition of data cleaning importance together with knowledge about its positive effects on dataset quality leads to reliable web scraping project outcomes.