What Is Data Privacy in AI? Explained Simply

If your company is shipping chatbots, copilots, or decision systems, you have probably heard the question many times: what is data privacy in AI, and how do we do it right. The answer is simpler than it looks. Data privacy in AI is a set of habits and controls that limit what personal or sensitive data you collect, how you use it, where you store it, and who can see it. When those habits are part of the build, AI products move faster, customers feel safer, and audits become routine.

Hack to School: Top 10 Cyber Threats Facing the Education Sector in 2025

As students return to classrooms, a different kind of "back-to-school" activity is ramping up: Hack-to-School. Cybercriminals and nation-state actors are intensifying their focus on educational institutions. According to Bitsight Threat Intelligence, the education sector is now the third-most targeted industry by cyber threat actors, facing a wide range of persistent and emerging risks.

Security Posture Assessment: A Strategic Overview

A Security Posture Assessment (SPA) provides a holistic evaluation of an organization’s cybersecurity readiness. It identifies vulnerabilities, evaluates compliance, and recommends actionable improvements across systems, users, policies, and tools. Netwrix solutions like DSPM help strengthen defenses, maintain compliance, and reduce the risk of data breaches.

Scaling API Security Without the Complexity: Lessons from Early Adopters

APIs are a blessing and a curse. They’re the backbone of the modern internet. They also expose complex behaviors that are often poorly documented, stitched together across legacy and cloud systems, and updated faster than security teams can review. Three key groups typically shoulder the burden of protecting them: When these groups work in silos, gaps appear. Security becomes fragmented, reactive, and expensive to maintain. This is where Wallarm Security Edge comes in.

Choosing the Right Data Security Platform

Choosing the right data security platform is essential for modern organizations. This blog walks through critical capabilities to look for, including data discovery, real-time risk management, access governance, and integration with IAM, DLP, CSPM, and SIEM tools. With Netwrix, organizations gain a unified platform to protect sensitive data, improve compliance, and reduce risk across on-premises and cloud environments.

Salesloft Drift Supply Chain Attack Affects Hundreds of Businesses

LevelBlue’s Security & Compliance Team is aware of the Salesloft vulnerability affecting Drift chatbot integrations. LevelBlue, and its affiliated entities, do not utilize Drift, and Salesforce has confirmed the incident did not impact clients without this integration. Based on current information, we confirm there has been no exposure or impact to us or our clients. Should new information arise that alters this assessment, we will provide an update directly.

npm Supply Chain Attack: What Happened and How to Protect Your Software

On September 8, 2025, a large-scale npm supply chain attack quickly compromised 18 popular packages (with the 18 packages representing more than 2.6 billion weekly downloads within the bioinformatics ecosystem). Attackers hijacked a maintainer’s account by impersonating npm support in a phishing campaign to upload backdoored versions of popular packages like chalk, debug, ansi-styles, and supports-color.

Why DSPM Is Essential for Your Modern Security Architecture

Data Security Posture Management (DSPM) delivers a data-first approach to security by discovering, classifying, and continuously monitoring sensitive data across your hybrid IT environment. This blog outlines how DSPM integrates into every layer of your modern security architecture, from IAM and DLP to SIEM/SOAR and DevSecOps. When paired with Netwrix solutions, DSPM becomes a proactive engine for reducing security risks, tightening compliance, and preventing unauthorized access and costly data breaches.

New SMB Vulnerability opens door to privilege escalation

On September 9, 2025, Microsoft released details of CVE-2025-55234, a critical vulnerability in the Windows Server Message Block (SMB) protocol. With a CVSS v3 score of 8.8, it’s classified as High severity and poses a serious elevation-of-privilege (EoP) risk. An attacker exploiting this flaw could launch a relay attack, allowing them to gain the privileges of a legitimate user without elevated permissions or insider access.