Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

cyberhaven

DLP for GenAI: How to Prevent Sensitive Data Leaks in AI Tools

May 25, 2026 By Cyberhaven In Cyberhaven
Employees are feeding sensitive data into AI tools at a pace most security teams did not anticipate. Source code goes into coding assistants. Customer records get pasted into ChatGPT to draft emails. Confidential contracts land in Gemini for summarization. According to Cyberhaven Labs research, 39.7% of the data employees share with AI tools is sensitive, and the volume is accelerating as AI adoption spreads from individual contributors to entire workflows.
Read Post
cyberhaven

Solving Common DSPM Challenges for Enterprises

May 22, 2026 By Cyberhaven In Cyberhaven
Most data security posture management (DSPM) programs don't fail because the technology is wrong. They fail because of execution gaps, from incomplete data inventory to misclassified data at scale to fragmented cloud environments and teams stretched too thin to act on findings. However, each of these problems is predictable, and each has a known fix.
Read Post
cyberhaven

RAG vs Agentic AI: What's the Difference and Why Does It Matter for Security?

May 22, 2026 By Cyberhaven In Cyberhaven
Security architects who understood the large language model (LLM) risk two years ago are now confronting a more complex problem. The enterprise AI stack has split into two distinct architectural patterns, retrieval-augmented generation (RAG) and agentic AI, and the security posture required for each is fundamentally different. Conflating them is how programs end up with coverage gaps.
Read Post
cyberhaven

LLM Access Controls and Audit Logging for Security Teams: A Practitioner's Guide

May 20, 2026 By Cyberhaven In Cyberhaven
Most organizations have an acceptable use policy for AI tools. Very few have controls that actually enforce it. The gap between what the policy says and what security teams can detect is where insider risk lives when it comes to large language model (LLM) usage.
Read Post

Your Browser Is Stealing Your Data Right Now

May 20, 2026 By Cyberhaven In Cyberhaven
In this video, you will learn how lightweight OS-level instrumentation binds lineage metadata to clipboard content the moment data is copied, how that tag survives edits, reformatting, and translation across applications, and how provenance-based policy replaces pattern matching with precision rules tied to the actual source of the data. You will also learn how pairing network tools with a browser extension captures user intent before encryption, eliminating the alert fatigue that buries real risk in noise.
View Video
cyberhaven

Building the Post-Mythos Security Organization: From Episodic Security to Continuous Assurance

May 20, 2026 By Cyberhaven's Office of the CISO In Cyberhaven
In an era where AI accelerates both innovation and adversarial capability, security leaders are confronting a difficult reality: traditional approaches to cyber defense are no longer sufficient. Cyberhaven’s Office of the CISO is responding with a forward-looking strategy designed not simply to keep pace with emerging threats, but to fundamentally redefine enterprise readiness in a post-Mythos world.
Read Post
cyberhaven

Why Legacy DLP Fails Against Agentic AI

May 19, 2026 By Cyberhaven In Cyberhaven
Security teams that deployed legacy DLP years ago built something real. The rules fire. The alerts go out. Compliance boxes get checked. The problem is not that those programs stopped working. It is that the threat moved, and the architecture did not. Agentic AI has introduced a class of data movement that legacy DLP was never designed to govern: autonomous, continuous, multi-step, and operating at machine speed across systems that static rules cannot enumerate in advance.
Read Post
cyberhaven

How to Measure the ROI of an Insider Risk Management Program

May 15, 2026 By Cyberhaven In Cyberhaven
Security leaders don't struggle to justify the need for insider risk management (IRM). They struggle to justify the budget. When the CFO or board asks why you're spending seven figures on a program to monitor your own employees, "because insider threats are real" isn't enough. Cyberhaven data shows office-based employees are 77% more likely to exfiltrate sensitive data than remote workers, and that risk spikes further during offsite logins and workforce transitions.
Read Post
cyberhaven

DSPM Buyer's Guide: 7 Criteria for Evaluating DSPM Tools

May 14, 2026 By Franklin Nguyen In Cyberhaven
Most data security posture management (DSPM) evaluations start with a deceptively simple question: where does our sensitive data live? There are many tools that answer that question. However, the number of tools that go further by tracking how data moves, enforcing controls when data leaves controlled environments, and closing the gap between visibility and action are far more limited.
Read Post
cyberhaven

Cyberhaven & Torq: Bringing AI-Powered Automation to IRM and DLP

May 14, 2026 By Iulia Stefoi-Silver In Cyberhaven
Sensitive data has become the target, the signal, and the source of risk in nearly every modern security program. Source code, customer records, intellectual property, credentials, and regulated data now move continuously across endpoints, cloud apps, SaaS platforms, browsers, collaboration tools, and GenAI applications. That movement is not inherently bad. It is how modern work gets done.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.