Verizon DBIR 2026: Shadow AI Now a Top Insider Threat
The most consequential finding in the 2026 Verizon Data Breach Investigations Report has very little to do with attackers. It has to do with employees. In the twelve months covered...
Technology
Test Safeguard Patient Privacy in Compliance With HIPAA
The Kiteworks Private Data Network delivers a unified and secure system for sharing and transferring PHI that ensures strict compliance with HIPAA and HITECH, mitigates governance gaps, and reduces the risk of...
AI Agent Incidents: Unchecked Risks Expose 65% of Organizations
The Cloud Security Alliance and Token Security published research on April 21, 2026, titled Autonomous but Not Controlled: AI Agent Incidents Now Common in Enterprises. The headline finding is blunt:...
Why ownCloud Is Launching an Open Source Program Office — and Retiring the CLA
Today, from Regensburg, Kiteworks is launching a formal Open Source Program Office (OSPO) with a published Governance Charter v0.1, retiring the Contributor License Agreement, introducing a Developer Certificate of Origin...
What NIST’s NVD Retreat and Claude Mythos Mean for Enterprise Data Security
In one week in April 2026, two announcements that were covered as separate stories collided into a single structural event. The U.S. National Institute of Standards and Technology formally conceded...
A Third-Party AI Tool Quietly Opened the Door to Vercel’s Internal Systems
On April 19, 2026, cloud development platform Vercel disclosed a security incident involving unauthorized access to certain internal systems. The company’s own bulletin and follow-up statements from CEO Guillermo Rauch...
Online Privacy Act 2026: Redefining U.S. Data Compliance
On March 19, 2026, Representative Zoe Lofgren (D-CA-18) introduced H.R. 8014, the Online Privacy Act of 2026, in the U.S. House of Representatives. At 151 pages across six titles, the...
MCP Flaw Exposed: Secure AI Data Governance Now
On April 15, 2026, SecurityWeek reported that the Model Context Protocol — the open standard that wires AI agents into enterprise tools, APIs, and data sources — contains a “by...
Security Blocks Agentic AI Scaling: Stanford Confirms Key Barrier
Stanford’s Institute for Human-Centered Artificial Intelligence published its 2026 AI Index Report this month, and most coverage has focused on the U.S.-China technology race — Chinese models closing to within...
Six AI Vulnerabilities. Three Failure Patterns. Most Organizations Are Fixing the Wrong One.
The Wave That Redefined AI Security Risk Between June 2025 and April 2026, security researchers disclosed six critical AI vulnerabilities across platforms that most enterprises rely on daily. Taken individually,...
Thank You, Mythos: AI’s Scariest Moment Is Finally Forcing the Right Conversation About Data Security
In April 2026, Anthropic released a preview of Claude Mythos, a general-purpose frontier model whose vulnerability research capabilities emerged not from specialized training but as a downstream consequence of improvements...
How Israeli Tech Companies Navigate Amendment 13 AI Accountability Provisions
Israeli technology companies developing artificial intelligence systems face heightened scrutiny under Amendment 13, a regulatory framework that imposes strict accountability requirements on AI-driven decision-making processes. These provisions require organisations to...
Amendment 13 Compliance for Israeli Technology Companies Processing Data at Scale
Israeli technology companies face heightened regulatory scrutiny when processing personal data at scale, particularly when transferring information across borders. Amendment 13 to Israel’s Privacy Protection Regulations establishes specific requirements for...
GrafanaGhost Exposes Three AI Security Failure Patterns — Not One
An Attacker’s URL, a Back-End Process, and Your Financial Data on an External Server On April 7, 2026, researchers at Noma Security disclosed GrafanaGhost — an attack that turned Grafana’s...
When SaaS Providers Must Appoint a DPO: Amendment 13 Triggers for Tech Companies
Many SaaS providers assume DPO appointments remain optional until reaching certain scale thresholds. This assumption creates regulatory risk when specific processing activities trigger mandatory DPO appointment regardless of company size....