Japan Cyberattacks Expose Hidden Risks Beyond Headquarters
Four major Japan cyberattacks reported within two weeks point to a common trend, with attackers gaining access through subsidiaries and […]
Applying Federal Digital Communications Privacy Law to Hosted AI Models
On March 31, I gave a virtual guest lecture in Mailyn Fidler’s course “The Digital Fourth Amendment” at Harvard Law
New Iran-Nexus Hacking Group Targets Israel Government and IT Sectors
A new cyber threat group linked to the Iranian government has been targeting Israeli government and IT organizations since early
Catan and Mouse
Welcome to this week’s edition of the Threat Source newsletter. “I do not know everything; still many things I understand.”
5 insights from Frost & Sullivan’s 2025 Frost Radar™ for Cloud Security Posture Management
Cloud security posture management (CSPM) is being redefined as two forces collide: Cloud environments are becoming more interconnected—spanning workloads, identities,
usecure Announces New Distribution Partnership with Northamber
We’re pleased to announce a new distribution partnership with Northamber, the UK’s longest-established trade-only IT distributor. From January 2026, usecure
Major medical device manufacturer notifies nearly 4 million of breach
The world’s largest medical device company is notifying more than 3.8 million people that their data may have been exposed
RCS and DNS: The NAPTR Record
Over the last year, with recent updates to iOS and Android, RCS (Rich Communication Services) has become an increasingly used
Data Leak Prevention vs Data Loss Prevention
Data Leak Prevention focuses on stopping unauthorized data transfers outside an organization, while Data Loss Prevention protects against loss, corruption,
EFF and Allies: X’s FTC Petition to Waive Privacy Violation Order Should be Rejected
X Corp. should not be able to escape privacy compliance because it changed its name. On May 15, X Corp.