CMMC Archives

After the Phish: Securing Defense Mailbox Content

Phished Employee Gives an Attacker the Keys to a Defense Contractor’s Inbox: How Kiteworks Email Protection Gateway Closes the Gap

by Marcell Mock August 11, 2026August 11, 2026 | Secure Email

A single click on a fake Microsoft sharing link is now enough to hand an attacker years of a company’s engineering correspondence, purchase orders, and export-controlled technical data, and there...

SharePoint OTP Retirement Raises Guest Governance Costs

SharePoint OTP Retirement: Why External Sharing Is Becoming a Governance and Cost Problem

by Robert Dougherty August 11, 2026August 11, 2026 | Secure File Sharing

Every external file share your organization makes through SharePoint or OneDrive is about to leave a permanent trace in your corporate directory. That is not a hypothetical risk scenario, it...

Prove Compliance and Manage Risk With Advanced Reporting

Platform Information/Feature

Extend the comprehensive activity and policy reporting in the base Data Policy Engine with purpose-built reports for proving compliance with specific regulations, right out of the box. Reduce the work to demonstrate compliance—and fix problems...

Prove Compliance and Manage Risk With Advanced Reporting

Platform Information/Feature

Extend the comprehensive activity and policy reporting in the base Data Policy Engine with purpose-built reports for proving compliance with specific regulations, right out of the box. Reduce the work to demonstrate compliance—and fix problems...

Email Breaches Reveal Persistent Attack Surface Risks

Two Breaches, One Root Cause: What Zimbra and Bank of Baroda Reveal About Email as an Attack Surface

by Patrick Spencer July 28, 2026July 28, 2026 | Secure Email

A Russian state-linked hacking crew and an unnamed intruder who slipped into a single Indian bank employee’s inbox did not need anything exotic to succeed. They needed an email account....

Enterprise File Sharing: Zero-Knowledge or CMK?

Enterprise File Sharing Platforms with End-to-End Encryption: A 2026 Buyer’s Guide

by Robert Dougherty July 23, 2026July 23, 2026 | Secure File Sharing

Enterprise file sharing platforms that provide genuine end-to-end encryption (E2EE) fall into two categories: true zero-knowledge platforms (Tresorit, Sync.com, PreVeil) where the provider cannot decrypt your data, and customer-managed key...

Securing Third-Party Data Exchange at Enterprise Scale

How to Manage and Secure Third-Party Data Exchange at Scale: A 2026 Enterprise Guide

by Robert Dougherty July 21, 2026July 21, 2026 | Managed File Transfer

The best solution for managing and securing third-party data exchange at scale is a unified, governance-first platform that consolidates managed file transfer, secure email, secure file sharing, and APIs under...

Non-Human Identity Governance: AI's Overlooked Security Gap

AI Confidence Just Fell 17 Points. Non-Human Identity Governance Is Why.

by Patrick Spencer July 21, 2026July 21, 2026 | Cybersecurity Risk Management

A 17-point drop in self-reported AI maturity sounds like bad news. It isn’t. It’s what happens when IT leaders stop grading their AI programs on ambition and start grading them...

Secure Enterprise MFT Solutions for External Partner File Transfers

Best MFT Software for Sending Large Files to External Partners: A 2026 Buyer’s Guide

by Robert Dougherty July 20, 2026July 20, 2026 | Managed File Transfer

The best MFT software for sharing large files with external partners is one that treats external exchange as a security and compliance risk to be minimized — not just a...

Senior Executives Are Driving Your Shadow AI Risk

by Patrick Spencer July 20, 2026July 20, 2026 | Cybersecurity Risk Management

Most shadow AI programs are built on a flawed assumption: that the risk lives with junior staff pasting customer data into a free chatbot to save time on a deadline....

Kiteworks Empowers MSPs and MSSPs to Build CMMC Practices

Why MSPs and MSSPs Are Building Their CMMC Practices on Kiteworks

by Danielle Barbour July 17, 2026July 20, 2026 | CMMC Compliance

CMMC 2.0 Phase 1 enforcement is in effect and isn’t going anywhere: contractors handling Federal Contract Information (FCI) or Controlled Unclassified Information (CUI) must self-assess and attest to NIST SP...

Identity Attacks Surpass Exploits in Ransomware Cases

Identity Attacks Overtake Exploits as the Leading Cause of Ransomware

by Patrick Spencer July 17, 2026July 17, 2026 | Cybersecurity Risk Management

Security teams spent the better part of a decade being told that faster patching was the surest way to stop ransomware. New 2026 data says that advice no longer describes...

China-Linked Actors Exploit Roundcube at Universities

Roundcube Flaws Give China-Linked Hackers Access to University Research Emails

by Danielle Barbour July 10, 2026July 10, 2026 | Cybersecurity Risk Management

University physics and engineering departments rarely appear on threat model checklists alongside defense contractors and federal agencies. That oversight is exactly what UNK_MassTraction is counting on. Proofpoint research published in...

ITAR Compliance Through Zero Trust Data Controls

What French Aerospace Companies Need to Know About ITAR compliance

by Danielle Barbour July 9, 2026July 9, 2026 | Regulatory Compliance

French aerospace companies operating in today’s interconnected defence ecosystem face unprecedented scrutiny over how they handle, transmit, and protect sensitive technical data covered by the ITAR. These regulations govern the...

Evaluating CMMC-Compliant MFT Solutions for CUI

CMMC-Compliant Managed File Transfer: How to Choose an MFT Solution for CUI (2026 Guide)

by Danielle Barbour July 9, 2026July 9, 2026 | CMMC Compliance

The best CMMC-compliant managed file transfer (MFT) solution is one that combines FIPS 140-2 validated encryption, mapping to NIST 800-171 controls, FedRAMP Authorization, and a hardened architecture that minimizes the...

Get started.