News and Articles

AI adoption is creating a new class of compliance risk that does not fit cleanly inside traditional policy, audit, privacy, or security programs. For years, most compliance programs were built around known systems, known data flows, defined user roles, documented vendors, and repeatable business processes. Artificial intelligence changes that operating model. It introduces probabilistic outputs, […] ...

AI adoption is creating a new class of compliance risk that does not fit cleanly inside traditional policy, audit, privacy, or security programs. For years, most compliance programs were built around known systems, known data flows, defined user roles, documented vendors, and repeatable business processes. Artificial intelligence changes that operating model. It introduces probabilistic outputs, […] ...

Today’s Topics: Squidbleed Shows Why Old Proxy Code Still Belongs in the Threat Model Squidbleed is the kind of vulnerability that looks small in code and much larger in an environment diagram. Tracked as CVE-2026-47729, the flaw is an out-of-bounds read in Squid’s FTP gateway that can leak fragments of proxy memory back to a […] ...

The modern browser has become one of the most valuable data repositories in the enterprise. It stores passwords, cookies, active sessions, autofill fields, saved payment details, authentication tokens, browsing history, device identifiers, and traces of nearly every cloud platform a user touches during the workday. For attackers, that makes the browser less like a utility […] ...

Software supply chain security has spent the last several years focused on source code, third-party packages, vulnerable libraries, and malicious dependencies. That focus made sense. Incidents like Log4Shell, dependency confusion, typosquatting, and compromised open-source packages made it clear that organizations needed better visibility into what their applications were built from. That visibility still matters. SBOMs, […] ...