Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Data Fiduciary vs Data Processor: The Key Distinctions Under the DPDP Act

Under India's Digital Personal Data Protection (DPDP) Act, 2023, every organization that handles personal data falls into one of two roles: data fiduciary or data processor. A data fiduciary decides why and how personal data is processed. A data processor carries out those instructions on the fiduciary's behalf, with no independent decision-making authority. The distinction matters because the DPDP Act ties accountability, liability, and contractual duty directly to which role you occupy.

AI Security Policy in Practice: How to Define What AI Can and Cannot Do

Most organizations that try to write an AI security policy start with two lists. Approved tools and banned tools. But, that list is inevitably out of date within a month. Employees adopt AI features embedded in everyday software faster than any review board can evaluate them, and a blanket ban does not stop the behavior, instead it pushes people toward personal accounts and unmanaged services.

How to Write a POA&M That FedRAMP Reviewers Accept

FedRAMP moved POA&Ms to agencies and replaced them with Accepted Weaknesses under the 2026 rules. Cloud providers must evaluate vulnerabilities in context (criticality, reachability, exploitability, detectability, prevalence, privilege, proximity, known threats), report results in JSON with PAIN N1–N5 ratings, and assume attacker automation. Remediate high PAIN, internet reachable risks fast; low PAIN risks can be accepted. Machine-readable data and platforms can help meet requirements.

WhatsApp Usernames: Privacy Feature Brings New Impersonation Risks

WhatsApp has begun rolling out usernames, letting people connect without sharing their phone number. The feature adds privacy for individual users but opens fresh territory for impersonation, lookalike accounts, and smishing, particularly as usernames are reserved on a country-by-country basis.

What's new in Tines: July 2026 edition

July was an exciting month in the world of Tines. We launched Tines 3B, the single, secure environment for every team’s apps, agents, and automation. It’s a new platform where everyone can build, while you safely run and monitor your organization’s most important work. The Tines platform you already know is now called Tines Stories, and we’ll continue to invest in, support, and develop it.

How Security Awareness Training Safeguards Operations

In any organisation, your people are your most valuable asset, but they can also be your greatest security vulnerability. Technical safeguards like firewalls and antivirus software are essential, but they can't stop a well-meaning employee from clicking a malicious link or unintentionally exposing sensitive data. This is where security awareness training becomes critical. It's not just about ticking a compliance box; it's about transforming your entire team into a proactive and vigilant line of defence that safeguards your daily operations.

Your Invoice Fraud Controls Probably Never Look at the Signature

Business email compromise took $3 billion in reported losses during 2025, the second-largest category in the FBI's Internet Crime Complaint Center annual report after investment fraud. The same report logged 1,008,597 complaints and $20.877 billion in total losses, up 26% on the year before. The control most organisations built in response is a callback procedure. Payment details changed? Phone the supplier on a number you already had. That control works, and it's worth having.

VSS Malaysia and Employment Contracts in Malaysia: A Practical Legal Guide

Employment relationships in Malaysia are generally built around an employment contract, which sets out the terms and conditions governing the relationship between an employer and an employee. Salary, working hours, leave, benefits, duties, confidentiality, termination and other important matters are commonly addressed in the employment contract.

A Hands-On Look at Photogenerator.ai: What Happened When I Tested This AI Photo Generator

I needed product shots and headshots fast. No studio. No budget for a photographer. So I opened Photogenerator.ai and spent several sessions testing it as an everyday user. This is what the experience actually felt like. No polished claims. Just notes from the process.

8 Best Encrypted Email Services to Protect Yourself With In 2026

Most successful hacks and data breaches are perpetrated through email. In a perfect world, everyone would find safer methods for communication, but since email isn't going anywhere anytime soon, encrypted email is our best option. Since Internxt doesn't have its own encrypted email yet, we've assembled a list of the best encrypted email services you should use in the meantime.