Uri Kedem, Author at Kiteworks

APIs: The Overlooked Pathway to Breaches

Secure APIs by Default: Prevent Breaches with Kiteworks Defense-in-Depth

by Uri Kedem September 22, 2026September 22, 2026 | Cybersecurity Risk Management

The API You Didn’t Build Is the One That Gets You Breached Every organization that connects systems together, an ERP to a supplier portal, a custom application to a document...

The Compounding Costs of Custom API Security

Build vs. Buy: Why Custom Integration Security Costs More Than You Think

by Uri Kedem September 22, 2026September 22, 2026 | Cybersecurity Risk Management

Somewhere in nearly every organization, a project starts with a sentence that sounds simple: “we just need to connect these two systems.” A supplier needs files delivered on a schedule,...

Secure Integrations: Speed Without the Tradeoff

Shipping Secure Integrations in Days, Not Months

by Uri Kedem September 22, 2026September 22, 2026 | Cybersecurity Risk Management

Ask almost any engineering leader whether they’d rather ship an integration fast or ship it securely, and they’ll tell you the question is unfair, because they need both. In practice,...

Architecture Secures Sovereign External Data Control

Sovereignty First: An Independent Governance Layer for External Collaboration

by Uri Kedem September 2, 2026September 2, 2026 | Kiteworks News

Most conversations about external collaboration start with policy: who is allowed to see what, and for how long. Fewer start with architecture: where does the data actually live, who holds...

Embedding Privacy into AI Projects for Regulated Industries

Why Regulated Industries Can’t Bolt Privacy Onto Their AI Projects

by Uri Kedem August 21, 2026August 21, 2026 | Cybersecurity Risk Management

A compliance officer at a mid-sized regional bank watches an AI chatbot pilot demo, and the first question out of her mouth isn’t “will it work?” It’s “where’s our customer...

Consistent Controls Across File Sharing Integrations

Integration Architecture for Secure Enterprise File Sharing: Data Flows, DLP, and Encryption Across M365, iManage, Salesforce, and MFT

by Uri Kedem July 29, 2026July 29, 2026 | Secure File Sharing

Enterprise file sharing doesn’t happen in isolation. The moment an organization connects a secure file sharing platform to Microsoft 365, a document management system, a CRM, or a managed file transfer channel,...

Europe's Collaboration Security: Confidence Without Control

Europe’s Collaboration Security Confidence Gap: Why Confidence in Your Tools Isn’t the Same as Control Over Your Data

by Uri Kedem July 10, 2026July 10, 2026 | Cybersecurity Risk Management

Confidence is not a control. That distinction is the story hiding inside a new survey of IT professionals across the UK, France, and Germany, commissioned by communications provider Wire and...

CISA Guidelines for Secure Agentic AI Adoption

CISA Drew the Red Lines on Agentic AI — Most Are Already Across

by Uri Kedem May 28, 2026May 28, 2026 | Cybersecurity Risk Management

On April 30 and May 1, 2026, six national cybersecurity agencies jointly published Careful Adoption of Agentic AI Services, a 28-page guidance document on securing autonomous AI agents — the...

Device Code Phishing: AI's Silent M365 Breach

M365 Device Code Phishing: The AI-Assisted Kill Chain Compromising Hundreds of Organizations Daily

by Uri Kedem May 20, 2026May 20, 2026 | Secure Email

Key Takeaways Daily Mass Compromises. Hundreds of M365 tenants are breached daily through an automated, AI-driven phishing campaign abusing device code authentication. Legitimate Flow Exploitation. Attackers weaponize Microsoft’s device code...

Double Extortion Ransomware: From Security to Compliance Risk

Ransomware in Q1 2026: Why Double Extortion Is Now a Compliance Problem, Not Just a Security One

by Uri Kedem May 20, 2026May 20, 2026 | Cybersecurity Risk Management

Key Takeaways Data Exfiltration Over Encryption. Ransomware groups now rely primarily on stolen data for extortion, exploiting compliance gaps like GDPR failures rather than locking systems. Persistent Elevated Activity. Overall...

Ontario AI Principles: Public Sector Compliance Essentials

Ontario AI Governance Principles: Public Sector Compliance Guide 2026

by Uri Kedem May 19, 2026May 19, 2026 | Cybersecurity Risk Management

Key Takeaways Joint Regulatory Framework. IPC and OHRC released unified principles that will directly guide assessments of public-sector AI systems. Operational Guidance Now. The principles fill the gap left by...

AI Reshapes Phishing as Top Initial Access Vector

AI Phishing Lures Reclaim Top Initial Access Spot in 2026

by Uri Kedem May 12, 2026May 12, 2026 | Secure Email

For four consecutive quarters, phishing had been dethroned. Exploitation of public-facing applications — fueled by a wave of on-premises Microsoft SharePoint compromises — had taken the top spot as the...

Data Sovereignty for Financial Services: Rules for Multi-Jurisdiction Operations

by Uri Kedem March 4, 2026March 4, 2026 | Regulatory Compliance

Most industries face a single dominant sovereignty framework — healthcare has HIPAA and GDPR, defense has CMMC and ITAR. Financial services is different. A bank operating in Germany, the U.S.,...

GDPR Regulators Aren’t Just Punishing Breaches Anymore. They’re Punishing the Security You Should Have Had.

by Uri Kedem February 25, 2026February 25, 2026 | GDPR Compliance

There’s a shift happening in European data protection enforcement that every compliance and security leader needs to understand. It’s not subtle, and it changes the calculus on how you invest...

AI Privacy Crackdown: 61 Regulators Target Generative AI Risks

by Uri Kedem February 24, 2026February 24, 2026 | Regulatory Compliance

It took a deepfake scandal to break the dam. On February 23, 2026, data protection authorities from 61 jurisdictions around the world dropped a joint statement that sent a blunt...

Security and Compliance Blog

Learn security strategies, compare vendors, and implement best practices to prevent breaches and compliance violations from risky third party communications.

Posts by Uri Kedem

Secure APIs by Default: Prevent Breaches with Kiteworks Defense-in-Depth

Build vs. Buy: Why Custom Integration Security Costs More Than You Think

Shipping Secure Integrations in Days, Not Months

Sovereignty First: An Independent Governance Layer for External Collaboration

CISA Drew the Red Lines on Agentic AI — Most Are Already Across

M365 Device Code Phishing: The AI-Assisted Kill Chain Compromising Hundreds of Organizations Daily

Ontario AI Governance Principles: Public Sector Compliance Guide 2026

AI Phishing Lures Reclaim Top Initial Access Spot in 2026

Data Sovereignty for Financial Services: Rules for Multi-Jurisdiction Operations

Get started.