Browse the full DataRidge library of data protection and governance guidance.
Breach & Risk AssessmentWhat Happened On September 10, an attacker accessed Denmark s Central Register of Persons (CPR) using credentials from Pays ApS, an IT company with legitimate access. The attacker used the password 12
Cryptography & EncryptionSecurity teams are buzzing about the new RSA attack making headlines. With your encrypted communications, API authentication, and certificate infrastructure relying on RSA, you need to know what s tru
Breach & Risk AssessmentA 16-year-old researcher recently accessed approximately 17.3 trillion database rows in Microsoft s internal analytics service. The vulnerability wasn t a sophisticated exploit. The service simply did
Breach & Risk AssessmentIf you re deploying autonomous agents to gather information, research data, or interact with external systems, you need to know when they cross from authorized access into unauthorized probing. The Op
Get weekly security insights and compliance updates delivered to your inbox.
Breach & Risk AssessmentWhen Spain s data protection agency documented an AI agent autonomously chaining attack phases, scanning files, exploiting vulnerabilities, and modifying data, they confirmed what security teams have
Breach & Risk AssessmentThe Challenge Manchester Airports Group (MAG) experienced a massive data breach when attackers exfiltrated 550 gigabytes of customer data from a third-party hosted database. This breach exposed 8.8 mi
Cryptography & EncryptionThe question at hand Your security team wants to roll out asymmetric encryption across the enterprise. Your operations team sees a nightmare of key management overhead. Both have a point. Public-key c
Access ControlScope This guide focuses on detecting, fixing, and continuously monitoring over-permissioned Amazon S3 buckets in both single- and multi-account AWS setups. You ll find steps for automated scanning, p
Cryptography & EncryptionQuantum computing is not yet a direct threat to your encryption, but ignoring it could be a costly mistake. While there s no quantum-enabled encryption failure to report today, the potential for futur
Cryptography & EncryptionScope This guide outlines practical steps your healthcare security team should take now to prepare for quantum computing threats. It s designed for security engineers, infrastructure leads, and CISOs
Breach & Risk AssessmentThe Conventional Wisdom Security teams often believe that human review of every alert, exception request, and policy change is essential for data protection. The logic seems sound: automated systems c
Data Governance FrameworksYour legal team keeps asking if the Digital Services Act is basically GDPR for platforms. Your compliance roadmap treats the AI Act as a data protection extension. You re not alone, but you re prepari
Breach & Risk AssessmentScope This guide outlines the technical controls and operational practices needed to prevent credential exposure in client-side JavaScript and secure API endpoints from unauthorized access. It focuses
Breach & Risk AssessmentThe Conventional Wisdom Ask any healthcare IT security team how they prevent unauthorized data access, and you ll hear the same checklist: role-based access controls, multi-factor authentication, and
Breach & Risk AssessmentA UK government agency just handed you a blueprint for what not to do. UK Government Investments left management files and 51 officials contact details exposed for 40 hours because one staff member ig
Cryptography & EncryptionThese questions came up in our team channel after the ClarityCheck incident hit the news. A digital investigation service left 9,042,977 facial images, 450.2 gigabytes worth, in an unprotected databas
Breach & Risk AssessmentWhat Changed Manchester Airports Group refused to pay ransom after hackers accessed contact information, vehicle registrations, and postcodes for 8.7 million customers. The breach primarily affected e
Breach & Risk AssessmentUnderstanding the Threat Security teams are grappling with the aftermath of McKesson s disclosure of unauthorized access to third-party applications on August 25, 2026. ShinyHunters claims they used v
