Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The recent lawsuit filed by xAI against former engineer Xuechen Li should serve as a critical wake-up call for every CISO. When a trusted engineer can allegedly download proprietary Grok IP, and jump to a competitor, it exposes fundamental gaps in how we protect our most valuable digital assets. This isn't just about one rogue employee. It's about the reality that your company's most sensitive data is at the risk of exfiltration every day—in laptops, SaaS and AI apps, endpoints and browsers.

Everyone's racing to use AI right now. But securing AI adoption while maintaining productivity—getting visibility into shadow AI, educating employees without blocking innovation, and building governance that actually works—is harder than it looks. We recently hosted a discussion between Anant Mahajan, Head of Product at Nightfall, and Yunique Demann, VP of Information Security at TPx, to dig into the practical realities of AI governance.

Data breach recovery has become a top priority for organizations in today’s digital world. Organizations must protect sensitive information that flows through networks, cloud environments, and endpoint devices. Data breaches, insider threats, and accidental leaks expose organizations to financial losses, compliance violations, and damage to their reputation.

Top tips is a weekly column where we highlight what’s trending in the tech world and share ways to stay ahead. This week, we’re uncovering the truth about app deletion, why removing an app from your phone doesn’t always mean your data is gone, and how to make sure your personal information doesn’t keep following you long after you’ve tapped uninstall. I recently found myself staring at my phone’s home screen. It felt cluttered.

Creating and implementing information security policies (ISPs) may seem like a formality to some. However, ISPs form the backbone of your data security posture. Information security policies and procedures can help you prevent data breaches, legal penalties, and financial losses by defining what’s allowed within your organization and what’s not. Developing an efficient security policy can seem like a lengthy and daunting task.

The Workday breach isn't just another security incident—it's a blueprint for how modern attackers are systematically dismantling traditional Data Loss Prevention (DLP) strategies. When a company renowned for security excellence falls victim to social engineering that bypasses every conventional control, it's time to fundamentally rethink your approach.