Uri Kedem, Author at Kiteworks

Europe's Collaboration Security: Confidence Without Control

Europe’s Collaboration Security Confidence Gap: Why Confidence in Your Tools Isn’t the Same as Control Over Your Data

by Uri Kedem July 10, 2026July 10, 2026 | Cybersecurity Risk Management

Confidence is not a control. That distinction is the story hiding inside a new survey of IT professionals across the UK, France, and Germany, commissioned by communications provider Wire and...

CISA Guidelines for Secure Agentic AI Adoption

CISA Drew the Red Lines on Agentic AI — Most Are Already Across

by Uri Kedem May 28, 2026May 28, 2026 | Cybersecurity Risk Management

On April 30 and May 1, 2026, six national cybersecurity agencies jointly published Careful Adoption of Agentic AI Services, a 28-page guidance document on securing autonomous AI agents — the...

Device Code Phishing: AI's Silent M365 Breach

M365 Device Code Phishing: The AI-Assisted Kill Chain Compromising Hundreds of Organizations Daily

by Uri Kedem May 20, 2026May 20, 2026 | Secure Email

Key Takeaways Daily Mass Compromises. Hundreds of M365 tenants are breached daily through an automated, AI-driven phishing campaign abusing device code authentication. Legitimate Flow Exploitation. Attackers weaponize Microsoft’s device code...

Double Extortion Ransomware: From Security to Compliance Risk

Ransomware in Q1 2026: Why Double Extortion Is Now a Compliance Problem, Not Just a Security One

by Uri Kedem May 20, 2026May 20, 2026 | Cybersecurity Risk Management

Key Takeaways Data Exfiltration Over Encryption. Ransomware groups now rely primarily on stolen data for extortion, exploiting compliance gaps like GDPR failures rather than locking systems. Persistent Elevated Activity. Overall...

Ontario AI Principles: Public Sector Compliance Essentials

Ontario AI Governance Principles: Public Sector Compliance Guide 2026

by Uri Kedem May 19, 2026May 19, 2026 | Cybersecurity Risk Management

Key Takeaways Joint Regulatory Framework. IPC and OHRC released unified principles that will directly guide assessments of public-sector AI systems. Operational Guidance Now. The principles fill the gap left by...

AI Reshapes Phishing as Top Initial Access Vector

AI Phishing Lures Reclaim Top Initial Access Spot in 2026

by Uri Kedem May 12, 2026May 12, 2026 | Secure Email

For four consecutive quarters, phishing had been dethroned. Exploitation of public-facing applications — fueled by a wave of on-premises Microsoft SharePoint compromises — had taken the top spot as the...

Data Sovereignty for Financial Services: Rules for Multi-Jurisdiction Operations

by Uri Kedem March 4, 2026March 4, 2026 | Regulatory Compliance

Most industries face a single dominant sovereignty framework — healthcare has HIPAA and GDPR, defense has CMMC and ITAR. Financial services is different. A bank operating in Germany, the U.S.,...

GDPR Regulators Aren’t Just Punishing Breaches Anymore. They’re Punishing the Security You Should Have Had.

by Uri Kedem February 25, 2026February 25, 2026 | GDPR Compliance

There’s a shift happening in European data protection enforcement that every compliance and security leader needs to understand. It’s not subtle, and it changes the calculus on how you invest...

AI Privacy Crackdown: 61 Regulators Target Generative AI Risks

by Uri Kedem February 24, 2026February 24, 2026 | Regulatory Compliance

It took a deepfake scandal to break the dam. On February 23, 2026, data protection authorities from 61 jurisdictions around the world dropped a joint statement that sent a blunt...

2026 Compliance Checklist for Secure File Sharing and Audit Readiness

by Uri Kedem February 24, 2026February 24, 2026 | Secure File Sharing

Modern compliance audits don’t just ask whether sensitive files are protected—they require proof. In 2026, secure file sharing systems support compliance and auditing by centralizing exchanges across channels, enforcing encryption...

Why Your DSPM MIP Labels Fail Enforcement—and How to Fix Them

by Uri Kedem December 11, 2025December 23, 2025 | Cybersecurity Risk Management

Most security teams assume that once Microsoft Information Protection (MIP) labels are applied, downstream controls just work. In reality, translating labels into enforcement across hybrid clouds and SaaS requires continuous...

Enhance Security with DSPM and MIP Label Integration

by Uri Kedem December 9, 2025December 23, 2025 | Cybersecurity Risk Management

Microsoft Information Protection (MIP) labels can absolutely translate into concrete enforcement actions when driven by a modern DSPM program. The key is integrating discovery and classification from DSPM with Microsoft...

Zero Trust for Data Privacy: A Practical Approach to Compliance and Protection

by Uri Kedem February 13, 2025September 23, 2025 | Cybersecurity Risk Management

The digital age has ushered in unprecedented opportunities, but it has also exposed organizations to a growing threat landscape. Data breaches are no longer isolated incidents; they are a constant...

How Digital Rights Management (DRM) Safeguards M&A Transactions

by Uri Kedem February 6, 2025September 23, 2025 | Digital Rights Management

Mergers and acquisitions (M&A) are some of the most complex and high-stakes business processes a company can undertake. Central to these transactions is the exchange of extremely sensitive corporate information....

Security and Compliance Blog

Learn security strategies, compare vendors, and implement best practices to prevent breaches and compliance violations from risky third party communications.

Posts by Uri Kedem