Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How long should an organization keep personal data? Under the DPDP Act, the answer is not simply one year, three years, or any other fixed period. The right retention period depends on why the data was collected, whether that purpose still exists, and whether another law requires the organization to keep it.

The August release brings significant advances across Egnyte, making AI more actionable, connected, and easier to use across everyday workflows. Key updates include the new Configuration Agent, AI-powered agents in workflows, enhanced AI Assistant capabilities, and expanded support for connecting AI tools through Egnyte MCP Server.

AI has rapidly evolved into a technology that takes action. AI agents can reason, access enterprise systems, and execute tasks autonomously at machine speed, often with the full permissions of the users they serve. As these agents proliferate across the enterprise, organizations need to understand where they operate, what they do, what they can access, and how to stop threats before they become breaches. This shift demands a new approach to AI security.

On August 31, 2026, CrowdStrike's Counter Adversary Operations team, in collaboration with international law enforcement and industry partners, executed a coordinated disruption of the Sality peer-to-peer (P2P) botnet, a criminal infrastructure that has operated with seeming impunity for more than two decades. The botnet enabled the operator to distribute malicious payloads to over 15,000 infected machines worldwide.

Accelerating security solutions for small businesses‍ Tagore offers strategic services to small businesses. A partnership that can scale‍ Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate. Standing out from competitors‍ Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.

Telecommunications providers sit at the center of modern life, carrying the calls, messages, locations, account credentials, and identity data that connect billions of people and businesses. Which makes them uniquely valuable targets: criminals want subscriber records they can monetize, while nation-state actors want access to the networks themselves. The biggest telecom data breaches show how quickly weak security measures can escalate from a customer privacy incident into a national security event.

Trust center software is what helps you publish a branded, access-controlled security page so buyers can self-serve certifications, policies, and answers to previously completed questionnaires. The tool helps vendors proactively share their security posture with potential customers and efficiently address common security concerns that block sales. Don't confuse this with Microsoft Office Trust Center. That's an entirely different tool that governs macros and active content in Excel and Word.

A CRA compliance gap assessment compares what your organization does with what Regulation (EU) 2024/2847 requires. It reviews each product and each role. It then produces a prioritized list of shortfalls. The list includes named owners, evidence pointers, and dates. It is not a conformity assessment. A conformity assessment decides whether a product may carry the CE marking. A gap assessment tells you whether you would survive one.

Antivirus and EDR catch malicious behavior on a machine. Neither tells you which valid credentials are exposed on it right now. That's credential security, a distinct job that finds exposed secrets and helps fix them before attackers do.

Microsoft 365 is one of the most widely used business platforms in the world. However, most businesses use only a fraction of what it offers, and leave some of its most important security features either switched off or set up incorrectly. M365 offers far more than the productivity tools we are all familiar with, like Outlook, Word, PowerPoint and Excel. Used properly, it’s a powerful cybersecurity platform. Used poorly, it offers a false sense of protection.