Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The latest News and Information on Data Security including privacy, protection, and encryption.

Beyond Attachments: How Email Becomes Your Biggest Data Exfiltration Vector

Your Microsoft 365 and Google Workspace security dashboards show green across all metrics. You've implemented data loss prevention policies, enabled advanced threat protection, and your team regularly audits security logs. Yet sensitive data continues to leave your organization through email channels. Why? Because attackers and even non-malicious insiders aren't using the obvious exfiltration techniques your tools were built to detect.

Safeguarding Sensitive Data in the Digital Age: The Evolution of DLP

In today’s interconnected world, data has become the lifeblood of business success, driving innovation, customer engagement, and operational efficiency. As organizations embark on rapid digital transformation, the proliferation of cloud computing and mobile devices, stringent privacy regulations such as GDPR and CCPA, and the rise of disruptive technologies like AI all play a key role in guiding the direction.

Enabling Safe AI Adoption: Insights from Nightfall AI and Vanta

How should data security teams walk the fine line between enabling AI innovation, safeguarding sensitive data, and ensuring compliance? That question drives everything we build at Nightfall. It’s also an excellent jumping off point for an in-depth discussion among security experts.

Cybercriminals Use Telegram Bots to Exfiltrate Data In Phishing Kit Campaign

KnowBe4 ThreatLabs has identified and analyzed a sophisticated cross-platform phishing campaign that utilizes Telegram as its primary exfiltration channel. The campaign uses a combination of security-themed phishing emails, branded phishing websites to harvest credentials, and Telegram bots to exfiltrate data.

Top tips: AI is coming for your data...unless you act first!

Top tips is a weekly column where we highlight what’s trending in the tech world and list ways to explore these trends. This week, we’ll explore how to prevent our data from being used by AI. The internet remembers everything. The album you posted on Facebook seven years ago, the silly blog you published when you were in school, the memes you liked, the videos you viewed—everything is etched onto the internet. You may forget, but the internet remembers.

Protecting Intellectual Property in Life Sciences: The Gravity of Data Security

Among many vital elements of its growth, the life science industry thrives on intellectual property. That includes information on everything from groundbreaking drug discovery to clinical trials and medical devices. Protecting such data goes beyond technical challenges, and it’s one of the industry’s basic necessities. Yet, both aspects must be adequately addressed.

The Importance of Data Cleaning After Scraping

Internet data extraction provides critical capabilities to businesses and research teams and software developers who demand current information. A major drawback of website data scraping is disorganized along with inconsistent and incomplete raw data stores. The value of gathered data becomes negligible when cleaning processes are omitted from the retrieval process. Clear recognition of data cleaning importance together with knowledge about its positive effects on dataset quality leads to reliable web scraping project outcomes.

Nightfall's Spring 2025 Product Launch Brings DLP to the AI Era

The rapid adoption of AI, particularly generative AI tools like ChatGPT and Copilot, presents both immense productivity opportunities and significant data security challenges for organizations. While employees increasingly leverage AI for various business functions, this widespread use often occurs outside sanctioned channels, creating what's known as shadow AI.

What is FIPS 140-3?

Encryption has become a vital data protection tool used by global governments, defense and enterprises. However, not all solutions use the same cipher techniques. Several encryption algorithms can be used to secure data with varying levels of security. To establish acceptable standards for encryption technologies utilized by the U.S. Government, the National Institute of Standards and Technology (NIST) published the Federal Information Processing Standards (FIPS) FIPS-140.

How To Secure Data When Working With Freelancers and Subcontractors

Working with freelancers and subcontractors is essential for business growth, but it also introduces security risks. In this short video, learn the top security threats businesses face when working with freelancers and several tips you can use to secure your organization’s data.