Technology Archives

AI Sandbox Bypasses Expose Data-Layer Control Gaps

When the Guardrail Fails: AI Coding Tools and the Data-Layer Question

by Patrick Spencer June 1, 2026June 1, 2026 | Cybersecurity Risk Management

There was no press conference. No breach notification letter. A flaw in a widely used AI coding assistant — one that researchers say could be chained with prompt injection to...

Synack 2026: AI Shrinks Exploit Window to Hours

Synack 2026 Report: The Exploit Window Has Narrowed to Hours

by Patrick Spencer May 29, 2026May 29, 2026 | Cybersecurity Risk Management

On May 14, 2026, Synack published its 2026 State of Vulnerabilities Report, an analysis of more than 11,000 exploitable vulnerabilities identified across customer environments in 2025. The central finding from...

The 2.5x Problem: Why AI Pen Tests Just Reframed the Data Security Conversation

by Patrick Spencer May 28, 2026May 28, 2026 | Cybersecurity Risk Management

When your application security pen test returns a 13% severe-flaw rate, you treat it as a Tuesday. When it returns 32%, you stop the deployment. Cobalt’s 2026 State of Pentesting...

Supply Chain Attacks Now Target AI Agents

When the Agent Becomes the Attacker’s Best Recruit

by Patrick Spencer May 28, 2026May 28, 2026 | Cybersecurity Risk Management

A campaign reported by CSO Online marks something genuinely new in the supply-chain threat landscape. Attackers seeded second-layer malicious packages across npm, PyPI, and Cargo, posing as cryptocurrency utilities. The...

AI Uncovers Critical GitHub Flaws via Reverse Engineering

CVE-2026-3854: When AI Finds the Bug Before You Patch It

by Patrick Spencer May 27, 2026May 27, 2026 | Cybersecurity Risk Management

On April 28, 2026, Wiz Research publicly disclosed CVE-2026-3854, a critical command injection vulnerability in GitHub’s internal git infrastructure with a CVSS score of 8.7. The exploitation chain is alarmingly...

Supply Chain Breaches: Securing Data Beyond LiteLLM Risks

AI Supply Chain Breach: The Mercor-LiteLLM Pattern Is Just Starting

by Patrick Spencer May 27, 2026May 27, 2026 | Cybersecurity Risk Management

On April 6, 2026, Computing reported that Meta had suspended its collaboration with AI data contractor Mercor following a breach that may have exposed sensitive information about how leading AI...

GDPR at Ten: The AI Decade Will Test Whether the Rules Can Hold

by Danielle Barbour May 26, 2026May 26, 2026 | GDPR Compliance

5 Key Takeaways The first decade of GDPR was a data-at-rest decade. Inventories, RoPAs, breach notices, DPIAs. The next decade will be a data-in-motion decade — prompts, training corpora, model...

Chile's AI Governance Meets Three 2026 Laws

Three Laws, One Deadline: Chile’s AI Reckoning Arrives in 2026

by Camilo Silva May 20, 2026May 20, 2026 | Cybersecurity Risk Management

Key Takeaways Converging 2026 Deadlines. Cybersecurity, privacy, and AI laws impose simultaneous obligations on Chilean operators, with no sequential compliance window. 732 OIVs Already Designated. ANCI has named operators across...

Verizon DBIR 2026: Shadow AI Now a Top Insider Threat

by Patrick Spencer May 20, 2026May 20, 2026 | Cybersecurity Risk Management

The most consequential finding in the 2026 Verizon Data Breach Investigations Report has very little to do with attackers. It has to do with employees. In the twelve months covered...

Test Safeguard Patient Privacy in Compliance With HIPAA

Platform Information/Feature

The Kiteworks Private Data Network delivers a unified and secure system for sharing and transferring PHI that ensures strict compliance with HIPAA and HITECH, mitigates governance gaps, and reduces the risk of...

AI Agent Incidents: Unchecked Risks Expose 65% of Organizations

by Patrick Spencer May 8, 2026May 12, 2026 | Cybersecurity Risk Management

The Cloud Security Alliance and Token Security published research on April 21, 2026, titled Autonomous but Not Controlled: AI Agent Incidents Now Common in Enterprises. The headline finding is blunt:...

Introducing ownCloud's New OSPO Initiative

Why ownCloud Is Launching an Open Source Program Office — and Retiring the CLA

by David Walter May 6, 2026May 6, 2026 | Kiteworks News

Today, from Regensburg, Kiteworks is launching a formal Open Source Program Office (OSPO) with a published Governance Charter v0.1, retiring the Contributor License Agreement, introducing a Developer Certificate of Origin...

What NIST’s NVD Retreat and Claude Mythos Mean for Enterprise Data Security

by Tim Freestone April 21, 2026April 21, 2026 | Cybersecurity Risk Management

In one week in April 2026, two announcements that were covered as separate stories collided into a single structural event. The U.S. National Institute of Standards and Technology formally conceded...

A Third-Party AI Tool Quietly Opened the Door to Vercel’s Internal Systems

by Patrick Spencer April 21, 2026April 21, 2026 | Cybersecurity Risk Management

On April 19, 2026, cloud development platform Vercel disclosed a security incident involving unauthorized access to certain internal systems. The company’s own bulletin and follow-up statements from CEO Guillermo Rauch...

Online Privacy Act 2026: Redefining U.S. Data Compliance

by Danielle Barbour April 21, 2026April 21, 2026 | Regulatory Compliance

On March 19, 2026, Representative Zoe Lofgren (D-CA-18) introduced H.R. 8014, the Online Privacy Act of 2026, in the U.S. House of Representatives. At 151 pages across six titles, the...

Get started.