Latest

Breach Autopsy: 23andMe Turns Credential Stuffing Into Genetic Data Governance

The 23andMe settlement turns credential stuffing into a governance test for genetic-data platforms.

Exhibit A(I): The First AI-Agent Breach Is an Evidence Problem

Hugging Face shows why autonomous-agent incidents need evidence control, not just token rotation.

Exhibit A(I): The New AI Security Problem Is Evidence You Cannot Reconstruct Fast Enough

AI governance fails when teams cannot reconstruct what tools, data, and people did during the first 72 hours.

Exhibit A(I): WordPress Just Proved Patch Management Is a Governance Control

WordPress patch urgency shows why public web infrastructure belongs inside governance controls.

Breach Autopsy: EY Shows Support Tickets Are a Data Store

EY's support-system breach shows why ticketing platforms are data stores, not operational exhaust.

Breach Autopsy: Abbott Shows Legacy Healthcare Systems Carry Their Own Blast Radius

Abbott's two-incident investigation shows why healthcare breach scope depends on legacy systems, portals, and inherited data boundaries.

Exhibit A(I): The SharePoint Zero-Day Is an AI Governance Problem Now

CISA added CVE-2026-58644, a critical Microsoft SharePoint Server vulnerability, to its Known Exploited Vulnerabilities catalog after evidence of active exploitation.

Policy Roast: Browser Agents Need Evidence, Not Permission Prompts

Browser agents, AI red teams, and vulnerability clearinghouses all point to the same failure: permission is not evidence.

The Docket: Treasury Just Named the Ransomware Supply Chain

Treasury's First VPN sanctions show ransomware enforcement is moving upstream to infrastructure, evasion tools, and evidence trails.

Breach Autopsy: Frontier Turns a Ransomware Intrusion Into a Data Minimization Case

A Frontier data breach lawsuit tests whether stale sensitive data can become litigation fuel after ransomware.

The Docket: SonicWall SMA1000 Shows the Edge Appliance Is an Administrative Control Plane

CISA's SonicWall deadline shows edge appliance response is an evidence problem, not just a patch ticket.

Explain This: The SonicWall SMA1000 Bug Is an Edge-Control Problem

SonicWall's SMA1000 zero-days are not just another patch alert. They show why remote-access appliances need ownership, evidence, and a short response clock.

The Docket: ShinyHunters Shows SaaS Trust Is an Attack Path

Microsoft's ShinyHunters research shows why OAuth grants, vendor integrations, and guest access now define SaaS breach risk.

Explain This: The Apple offboarding lawsuit is really about access residue

Offboarding is only complete when systems prove access, tokens, devices, and inherited permissions no longer work.