Tag: data security
186 articles
Proofpoint Bolsters Data Security with $6.3 Billion Varonis Acquisition
In a massive $6.3 billion deal, Proofpoint is acquiring Varonis Systems to supercharge its data security capabilities, addressing the growing need for organizations to safeguard sensitive information from compromise, loss, and misuse. This game-changing move combines Proofpoint's people-focused defenses with Varonis' cutting-edge data mapping technology.
Federal Agencies Face New Era of Speed in National Security Missions
Federal agencies are racing against the clock to outpace threats, but their systems are holding them back - at the recent Intelligence and National Security Summit, experts gathered to tackle this pressing challenge. With AI turbocharging operations and data volumes exploding, the stakes have never been higher.
OAuth Grants Proliferate, Exposing Hidden Risks
The average employee has 88 OAuth grants, with 31 carrying data-level permissions, creating a governance nightmare that's a daily arms race. Unlike other access controls, OAuth grants operate on a separate trust relationship between apps, outliving employee credentials and evading traditional security measures.
Cyber Risk Shifts Inside the Workflow
As AI tools become increasingly embedded in workflows, a growing number of organizations are struggling to balance innovation with security, with 78% of CISOs now recognizing GenAI as a security risk and restricting employee use. But blocking access alone isn't enough - effective governance is crucial to ensure AI systems are used safely and responsibly.
Pentagon Breach Exposes 3 Million in Sensitive Data for Months
A recent Pentagon breach left a staggering 3 million people vulnerable after highly sensitive data was exposed for months due to undetected unauthorized access. This alarming incident serves as a stark reminder of the importance of robust data security measures.
Federal Agencies Bolster Crisis Readiness with Data, Security Overhauls
To prepare for the next crisis, federal agencies must prioritize speed by setting up operational models that can swing into action at a moment's notice, and that means having data from disparate sources that's ready to inform critical decisions. By making data decision-ready, agencies can turn crisis response from a scramble into a swift and effective operation.
OpenAI Halts Advanced Model Training Amid Rogue Agent Allegations
OpenAI has hit the pause button on training its most advanced models after a rogue agent was allegedly used, and the company is now working to resolve the issue and prevent similar incidents in the future. CEO Sam Altman acknowledged that progress has been slower than hoped, but the company is prioritizing transparency and collaboration with affected organizations.
Data Leaders Wrestle with File Governance Gaps
Join a private dinner discussion in New York on October 27th, where data leaders will gather to tackle the costly problem of file governance gaps - and share their own hard-won insights, off the record. This exclusive, peer-only conversation, led by Joe Fay, offers a unique chance to swap stories and solutions with fellow leaders.
Test Environment Exposes Live Customer Data Due to Oversight
A mid-size company's security audit uncovered a shocking oversight: a test environment was accidentally exposing live customer data to the internet, highlighting how easily security problems can arise from simple mistakes. This eye-opening discovery was made by Richard Schut, Managing Director & AI Software Researcher at SmartRepl, during a routine audit aimed at identifying potential issues before migrating local systems to the cloud.
NSA's CSfC Program Gains Trusted Integrators
The NSA's CSfC program is revolutionizing data security by allowing government agencies and military organizations to tap into the power of commercial off-the-shelf products, and Sigma Defense Systems is leading the charge as a trusted integrator. This innovative approach offers a flexible alternative to traditional Type 1 solutions, empowering the warfighter with cutting-edge tools to transport and store classified data.
AI Dominates Black Hat Security Vendor Landscape
The AI revolution has officially hit the security world, with AI-powered solutions dominating the vendor landscape at Black Hat - even if not all vendors are shouting it from the rooftops. AI is now a ubiquitous force, driving innovation in key areas like Identity, SaaS, AppSec, and Data.
Tribeca Film Festival Data Leak Reveals Celebrity Records
The Tribeca Film Festival recently suffered a data leak, exposing a whopping 666,369 records, including sensitive celebrity information, after a cybersecurity researcher discovered three unsecured databases left vulnerable to public access. The festival has since taken swift action, assuring the researcher that they are actively investigating and taking data security very seriously.
Varonis Unveils Agent IBAC to Curb Rogue AI Behavior
Imagine a world where rogue AI agents can't wreak havoc on your data - Varonis' new Agent IBAC capability is here to make that a reality, ensuring software agents operate within their intended boundaries. By monitoring agent behavior in real-time, Agent IBAC prevents unauthorized actions and protects sensitive data from exposure or deletion.
23andMe Agrees to $18m Settlement, New Data Security Mandates
After cracking down on 23andMe's lax security measures, a coalition of 42 US attorneys general, led by New York Attorney General Letitia James, has secured an $18 million settlement and binding data-protection commitments to safeguard customer information. This move comes after a 2023 data breach put millions of 23andMe customers at risk of having their personal info exposed.
Federal Agencies Pursue Secure AI With Data Clarity, Infrastructure Overhaul
The harsh reality is that most organizations are flying blind when it comes to their data, with little insight into what they have, where it's stored, or if it's properly secured. This knowledge gap is a major hurdle for federal agencies looking to harness the power of AI while keeping sensitive data safe.
Maine Disables Breach Database After Fake Reports Flood In
Maine's Attorney General's office has temporarily taken down its public database of data breach reports after being flooded with fake submissions, including hoax reports targeting VRChat and another company. The office is reviewing its procedures to prevent future abuse and plans to reinstate the database with enhanced safeguards.
Maine Disables Breach Portal After Hoax Submissions
Maine has temporarily shut down its public data breach reporting portal after being hit with a series of false reports, or hoaxes, submitted through the system. The state's Attorney General's Office is reviewing the situation and has removed the fraudulent filings from its database.
Managing Shadow AI Tools Requires a Proactive Security Approach
Employees are now using three to five AI tools daily, outpacing the controls in place to manage them, and creating a growing security gap that's hard to ignore. This surge in shadow AI tools is fueled by three key areas: OAuth connections, browser extensions, and bundled AI.
Varonis Integrates Claude Compliance API for Enhanced AI Governance
Varonis has integrated the Claude Compliance API into its Atlas AI Security Platform, empowering enterprises to confidently adopt AI with enhanced governance and oversight. This integration enables security teams to monitor AI usage, detect misuse, and assess risks with unparalleled data context.
CISOs Weigh Ransom Payments Amid Ransomware Resilience Gap
A surprising 58% of CISOs admit they'd consider paying a ransom to quickly restore encrypted systems, revealing a stark reality in the ongoing battle against ransomware. This willingness varies by geography, with 63% of US CISOs and 47% of UK CISOs open to making a payment.
AI Adoption Exposes New Vulnerabilities in APAC Cybersecurity
As AI systems increasingly become integral to business operations, they're also emerging as a major insider threat, with 7 in 10 APAC organisations now identifying AI as their top data security risk. This new breed of threat is forcing companies to rethink their cybersecurity strategies and take a closer look at the vulnerabilities AI can introduce.
Legacy Security Tools Hinder Data Protection Efforts
With data constantly moving across cloud and AI environments, traditional security tools are holding you back from truly protecting your data - it's time for a modern approach. A staggering 72% of security professionals agree that data security is more critical than ever, making an evolution in strategy urgent.
Cushman & Wakefield Discloses Vishing Incident Amid Dual Ransomware Threats
Cushman & Wakefield recently fell victim to a vishing incident, but swift action was taken to contain the breach and protect its systems. The company has confirmed that its operations remain normal and it's working closely with experts to investigate and respond to the incident.
Iowa AG Targets Change Healthcare Over Ransomware Lapses
Iowa's attorney general is taking a stand against UnitedHealth Group, seeking financial damages and major security overhauls after a devastating 2024 ransomware attack on its Change Healthcare unit. The bold move aims to hold the healthcare giant accountable and prevent similar cyberattacks in the future.