More Tools Does Not Mean Faster or More Accurate Insights
An access-review tool flags an account with more privilege than its role needs: routine, filed, forgotten. That same week, a separate scan shows that the same account can reach a folder of…
-
-
Employee offboarding security: how to protect your business
When organizations evaluate what’s threatening their enterprise security, they often focus on preventing large-scale attacks. However, the most critical risks are far less visible: the mishandling of account access and…
-
Who (or What) Generates Images for EFF?
We’ve had a few questions from EFF supporters lately, asking whether the images we use on our blog posts, or on donation and shop items, have been created with AI image generators. We’d like…
-
Simple Tips To Stay Compliant When Collecting Emails on Your Website
The way you collect email addresses on your website is subject to a growing web of privacy regulations. If you’re not compliant, you’ll lose trust among subscribers and could even…
-
A Guide to AI Security Posture Management (AI-SPM)
More businesses are using artificial intelligence, like autonomous AI agents, to handle day-to-day tasks like scheduling meetings, updating CRMs, and generating reports. While these systems help teams save time and…
-
Why Companies Are Leaving OneTrust in 2026
Imagine you order an entree at a restaurant. What do you expect from your dining experience?
-
What is shadow AI? The hidden risks to your business
AI tools are now part of everyday work, helping people summarize meeting notes, draft emails, debug code, analyze spreadsheets, and turn documents into presentations. Used without approval or oversight, however,…
-
Tomorrow’s U.S. Senate Vote: Four Internet Bills, One Wrong Direction
The Senate Commerce Committee will vote this week on several censorious and privacy invasive bills: KOSA, the SCREEN Act, Youth AI Privacy Act, and CHATBOT Act. While we appreciate that…
-
GDPR Cookie Consent: How To Comply
Complying with the General Data Protection Regulation (GDPR) is essential for websites with users in the European Union. Below, I break down what GDPR cookie consent means, what the requirements…
-
MCP Security | Security Risks & Mitigation Strategies
Model Context Protocol, or MCP, is changing how artificial intelligence interacts with enterprise systems. Instead of building a separate custom integration for every data source, application, or tool, developers can…
