Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ENGIE Data Breach via Third-Party Marketing Platform: Defending Against Supplier-Side Customer Data Theft
Introduction French energy giant ENGIE — one of the world's largest power and natural gas providers, serving millions of residential and com...
Denver Health Medical Plan Vendor Breach: 238K Members Exposed — Third-Party Risk Detection and Response Guide
Introduction Denver Health Medical Plan (DHMP) has disclosed a vendor-related data incident affecting more than 238,000 individuals, as repo...
Tarter Krinsky & Drogin Breach: PHI of 197,000 Exposed — Detection & Hardening Guide for Legal and Healthcare Data Environments
Introduction Manhattan law firm Tarter Krinsky & Drogin LLP has disclosed a data breach involving the protected health information (PHI) of ...
Meta's $25B Cambridge Analytica Ruling: Third-Party Data Sharing Governance Lessons for Defenders
Meta Ordered to Pay $25 Billion Over 43 Million Privacy Violations A New Mexico state court has ordered Meta to pay $25 billion in penalties...
Conduent Breach Fallout: $80M Settlement for 62M Records — Detection and Third-Party Risk Lessons for Healthcare Defenders
The Settlement That Should Reshape Your Vendor Risk Program Conduent, one of the largest business services firms supporting government agenc...
BAE Systems Cyber Incident Shuts Down US Bankruptcy Noticing Center: Third-Party Risk and Detection Playbook for Defenders
A Week of Silence: When a Defense Contractor's Breach Becomes Everyone's Problem On October 9, a security incident at BAE Systems Inc. — the...
BAE Systems Cyber Incident Disrupts US Bankruptcy Noticing Center: Third-Party Compromise Detection and Response Playbook
BAE Systems Cyber Incident Knocks Federal Bankruptcy Noticing Offline A cyber incident affecting defense contractor BAE Systems has rendered...
Ransomware Negotiator Arrested for Colluding With Attackers: Third-Party Risk Lessons for IR Programs
The Negotiator Who Played Both Sides The ransomware response industry just absorbed one of the most damaging trust shocks in its history. A ...
BAE Systems Breach Disrupts Federal Bankruptcy Court Noticing — Third-Party Compromise Response Guide
When a single contractor outage can silence an entire branch of the federal judiciary, third-party risk stops being a compliance checkbox an...