compliance ·
Regulators Signal Tougher Stance on AI Training Data Provenance
Documentation of lawful basis for training corpora is becoming an audit item, not a nice-to-have.
Data-Secu — Data Security News
secure data processing ·
Encrypting Data in Use: A Practical Guide to TEEs
Choosing between SGX, SEV-SNP, and Nitro Enclaves for sensitive data processing workloads.
cloud security ·
Zero-Trust Data Access: Beyond the Buzzword
What per-query authorization actually looks like when the data layer, not the network, is the perimeter.
data breaches ·
Supply-Chain Attack on Analytics SDK Exfiltrated Customer Events for Months
A poisoned minor release forwarded event payloads to attacker infrastructure since March.
privacy engineering ·
Differential Privacy at Scale: Census-Style Noise Reaches Industry
Telemetry pipelines are adopting formal privacy budgets instead of ad-hoc anonymization.
cloud security ·
S3 Bucket Misconfigurations Still Drive a Third of Cloud Data Leaks
Public-by-accident object storage remains the most common root cause in cloud breach reports.
secure data processing ·
Homomorphic Encryption Startups Face a Performance Reckoning
FHE benchmarks improved 100x in five years and are still orders of magnitude from plaintext speed.
data breaches ·
Healthcare Group Discloses Breach Affecting 2.3M Patient Records
A legacy file-transfer appliance again proves to be the softest entry point into regulated data.
secure data processing ·
Tokenization vs. Format-Preserving Encryption for PII: Field Notes
Both hide the value; they differ in key management blast radius and analytics ergonomics.
data breaches ·
Ransomware Crew Shifts to Pure Data Extortion, Skipping Encryption
Exfiltrate-and-extort is cheaper and faster than encrypting fleets, and backups no longer save you.
secure data processing ·
Confidential Computing Moves Mainstream as Enclave Tooling Matures
Hardware-isolated execution is no longer research-grade: attestation and deployment tooling caught up.
compliance ·
What the New NIS2 Guidance Means for Data Processors
Processors, not just controllers, now carry direct obligations for incident reporting and supply-chain assurance.
secure data processing ·
Postgres Row-Level Security in Production: Lessons From Three Post-Mortems
RLS prevents entire classes of data leaks, but only when session context is set correctly on every connection.