The Threat
Malware usage by adversaries has reportedly declined. Partly due to sophisticated detection methods commonly deployed by medium to large organisations.
Conversely, insider threats (cybersecurity risks originating from within an organisation) are increasing, posing complex and costly challenges for businesses. CrowdStrike’s 2025 Global Threat Report indicates that insider threat operations accounted for 40% of
Every so often, a small design element quietly does big things. This week, we’re highlighting a new feature—one that sits at the intersection of subtlety and effectiveness: the CTA (Call To Action) section, now available in our Stoddard WordPress theme.
You might’ve seen this new addition on this very blog. Just below the main content,
Darkreading.com reported that “In the wake of AI’s explosive growth, security and risk are no longer polite footnotes at the end of a board meeting. Suddenly, everyone from the CEO to the most junior product manager is asking, “What’s our plan for AI risk?”” The October 27, 2025 article entitled ” CISOs Finally
Today is Halloween! This is my sixteenth(!) year (sixth on this blog) to identify stories to try to “scare” you with tales of eDiscovery, data privacy, cybersecurity information governance and AI horrors because it is, after all, an eDiscovery blog. Let’s see how I do this year.
The post It’s After 2:17AM. Do You Know
Law firms can spend countless hours on a critical but time-intensive process: identifying and cataloging client requirements during new business intake.
That’s why, way back in 2017, Intapp introduced an AI feature in Intapp Terms that identified and categorized terms of business. It helped document reviewers easily access and validate those terms, as well as
On October 21, 2025, the New York State Department of Financial Services (“NYDFS”) issued an industry letter (the “Guidance”) highlighting the cybersecurity risks related to Covered Entities’ use of Third-Party Service Providers (“TPSPs”) and providing strategies to address these risks. The Guidance is addressed to all Covered Entities subject to NYDFS’s cybersecurity regulation codified at 23 NYCRR Part 500 (“Cybersecurity Regulation”), which requires Covered Entities to implement a comprehensive cybersecurity program that includes written policies addressing TPSP risks as well as due diligence, contractual requirements, and periodic assessments for TPSPs. While the Guidance is explicit that it “does not impose any new requirements” beyond those already included in the Cybersecurity Regulation, it provides significant additional detail to clarify how to comply with existing requirements and offers industry best practices to mitigate TPSP-related cyber risks. As the Guidance suggests that NYDFS will continue to focus on TPSP-related cyber risks, Covered Entities should consider reviewing their TPSP oversight and management against the specific recommendations from the Guidance and adjusting their practices where appropriate. Alongside a review of TPSP oversight and management, Covered Entities may also consider reviewing their implementation of the provisions of the Cybersecurity Regulation requiring multifactor authentication, asset management, and data retention, which take effect on November 1, 2025.
DarkReading.com reported that “AI search tools like Perplexity, ChatGPT, and OpenAI’s Atlas browser offer powerful capabilities for research and information gathering but are also dangerously susceptible to low-effort content manipulation attacks. It turns out websites that can detect when an AI crawler visits can serve completely different content than what human visitors see, allowing bad
On June 2, 2025, the U.S. Food and Drug Administration (FDA) announced the deployment of its own artificial intelligence system, “Elsa.” The large language model-powered system was scheduled for full-scale implementation across the agency by June 30, 2025. Initially piloted for FDA scientific reviewers, Elsa is intended to streamline internal processes and increase operational efficiency within the agency.
By Kelly Twigger, CEO, Minerva26
For too long, discovery has been treated like a compliance chore. Check the boxes, survive the deadlines, move on. That mindset doesn’t hold up anymore.
When nearly all evidence lives as ESI, discovery is the case. Early, defensible decisions about data now set the trajectory—what gets found, what gets missed,
Troutman Pepper Locke is proud to sponsor the Government Investigations & Civil Litigation Institute’s 11th Annual Meeting in Santa Ana Pueblo, New Mexico. Ashley Taylor will be moderating the “Navigating State Jurisdictional Waters: State Attorneys General and Their Reach” session, Ghillaine Reid will be a panelist on the “AI Ethics: Guardrails and Grey Areas in