
This list of five common sources of accidental data leaks will help you identify the problems that could be lurking in your systems, apps, and platforms. Use these examples to prepare tighter security controls and keep internal problems from becoming major issues across your entire organization.

If your organization is in a similar position, we want to help ease the transition and have a no-cost option that can help keep your mission-critical data safe via data loss prevention on the cloud. Nightfall DLP for Slack is available at no cost from March 16th until October 31st, 2020.

Maynard Webb is a tech industry leader and veteran with a distinguished career. Since joining IBM straight out of college, he’s had a variety of roles—from entry-level to CEO and board member—in some of the tech industry’s most prestigious companies

As we reach the halfway point of 2020, we see a long and overdue dedication to the BLM movement across the country. The senseless murders of George Floyd, Ahmaud Arbery, Breonna Taylor, and countless others underscore the severe issues of racism and injustice we live with every single day.

This post outlines how each of the three steps of DLP supports compliance and regulatory standards, with a look into a hypothetical case study covering business associate agreements required for HIPAA compliance. Finally, we’ll share how a solid DLP solution can take on your company’s data governance.

Ryan Nece followed in his father Ronnie Lott’s footsteps to become a Super Bowl champion, philanthropist, and venture capital leader. He’s building his legacy as the co-founder and managing partner of Next Play Capital, a VC firm that’s investing in rising startups

The last decade has seen a dramatic rise in data breach risk, with data breach incidents increasing nearly 840% between 2005 and 2019 according to the Identity Theft Resource Center. In this guide, learn about the growing problem of sensitive data exposure and how to use the Nightfall Developer Platform to easily build tools to identify and remediate this problem.

The Atlassian ecosystem provides thousands of companies with the ability to collaborate remotely through powerful, feature-rich SaaS applications like Confluence. Over the least year, the rise of remote work has meant many companies have hosted their internal information hubs on Confluence. As such tools become the norm across companies, big and small, the amount of sensitive information stored in these systems will increase.

The Atlassian ecosystem provides thousands of companies with the ability to collaborate remotely through powerful, feature-rich SaaS applications like Jira. As such tools become the norm across companies, big and small, the amount of sensitive information stored in these systems will increase. This means that organizations need to prioritize minimizing the risk of exposure within cloud environments.

We’re excited to introduce Jeannie Liou who joined Nightfall as our Director of Product Marketing. With an extensive background in product marketing, Jeannie has a storied marketing career working with companies such as Apple, Rubrik, and Snowflake. She brings with her a deep knowledge of building out product positioning and messaging that resonates with customers, as well as a passion for technology that improves the way we work, transact, and collaborate.

The rise of cloud, containers, and microservices has shifted the way software developers work for good. Whereas traditionally, software developers would release a new version of an application every few months, today’s platforms allow teams to work faster and more streamlined. These advancements have led to the rise of “software, safer, sooner” — also known as DevSecOps.

As with most SaaS applications, within Salesforce it is your organization’s responsibility to determine whether Salesforce’s default security settings meet your specific security and compliance obligations.Read this online guide, for free, to learn about the problem of data exposure in Salesforce and how to ensure compliance with HIPAA, PCI, and other leading industry standards while storing sensitive data in Salesforce.

Environments like GitHub present data exposure risk in the form of secrets leakage and sensitive PII leaking from repositories. Read this online guide, for free, to learn about the problem of secrets exposure and leakage in GitHub, as well as how to easily implement secrets detection and scanning to prevent this risk.

When Uber was breached in September, the hacker remained undetected until they announced their presence within the org via Slack. This incident provides yet another example of Slack being leveraged by an attacker. In this post, we’re going to review some of the ways attackers have used Slack in breaches, why this is happening, and what you can do about it.

Many states in the US have data privacy and protection statutes as part of their legal codes. For the most part, these codify what types of PII/PI constitute a data breach, as well as when and how an entity doing business should communicate with customers if a data breach occurs.

The Brazilian General Data Protection Law (LGPD) came into effect on August 16, 2020. The law creates new rights for individuals with respect to their data and imposes significant obligations on companies that process personal data. This guide will provide an overview of the key provisions of the LGPD and explain the steps that companies must take to comply with the law.

Nightfall customers have always lauded the platform’s ease of use and simplicity, but our team is always hard at work looking for ways to improve user experience. This month, we’ve made multiple features GA across the platform, that will further your ability to further customize what content and files trigger Nightfall detectors as well as the ways you can ingest this data.

The Nightfall blog is a knowledge base for cybersecurity professionals with news and insights from the world of cloud security. Each week, we’re publishing new content to help you stay up-to-date on cybersecurity topics and to prepare you for the issues and threats that occur every day on the job.

Yesterday, TechCrunch broke a story about pharmaceutical giant AstraZeneca, which experienced a leak affecting sensitive patient data. We think this incident is worth reviewing to learn more about how data exfiltration risk is distributed across the entirety of an organization’s SaaS infrastructure.

Data exfiltration poses a significant threat to organizations across all industries. With cybercriminals using increasingly sophisticated methods to illicitly obtain sensitive information, IT and security teams face the daunting task of protecting their digital assets against both internal and external threats. This webinar will provide your team some practical strategies to enhance your company's defenses against data exfiltration.

Email remains a critical channel for business communication and also remains a prime exfiltration and attack vector. Traditional Secure Email Gateways (SEGs) and rules-based DLP solutions are proving inadequate against data loss, exfiltration, sophisticated attacks and the complexities of modern cloud environments. Whether your organization relies on Gmail or Exchange or a hybrid email environment, Nightfall AI can protect your email against data loss and exfiltration with a comprehensive, flexible, and efficient approach to protecting your email across platforms.

Nightfall for Notion DLP is purpose-built to pinpoint sensitive data across Notion workspaces. Whether you’re using Notion as an internal wiki, a note-taking app, or something more, Nightfall’s AI-powered detectors will identify and remediate high-priority risks to ensure that your business stays continuously secure and compliant as you scale.

All employees have a part to play in keeping company secrets safe—however, developers have an outsized role due to their privileged access to sensitive databases, production systems, and source code. With these unique challenges in mind, Nightfall partnered with Snyk to offer AI-powered secrets scanning for developers working in every stage of the code-to-cloud lifecycle.

Generative AI is exploding, allowing companies to do more with less. It is, however, also exposing companies to more data security risks than ever before. In our upcoming fireside chat, we'll join Enrique Salem, former CEO of Symantec, and Isaac Madan, CEO of Nightfall, to discuss the biggest security risks of Gen AI, as well as strategies you need to stay compliant without impacting employee innovation. By the end of the chat, you'll be armed with the tools you need to safely use ChatGPT and other Gen AI tools across your business. See you there!

Healthcare organizations require an effective way to scale HIPAA compliance enforcement across their cloud applications without excessive time and resource commitment. This requires a high-accuracy solution capable of parsing context to identify PHI violations as they are defined by HIPAA
Data loss prevention (DLP) is an important part of data security and compliance in the cloud, especially for organizations regulated by HIPAA. Furthermore, healthcare teams using Slack must follow specific guidelines laid out in Slack’s Business Associate Agreement (BAA).
Data loss prevention (DLP) is an important part of data security and compliance in the cloud, especially for organizations using SaaS applications that store high volumes of data. Companies turn to DLP solutions to discover, classify, and protect their sensitive data in environments like Jira, and maintain compliance with regimes like GDPR, CCPA, PCI, and more.
Data loss prevention (DLP) is an important part of data security and compliance in the cloud, especially for organizations using SaaS applications that store high volumes of data. Companies turn to DLP solutions to discover, classify, and protect their sensitive data in environments like Google Drive, and maintain compliance with regimes like GDPR, CCPA, PCI, and more.

As a result of growing data breaches governments across the world are beginning to implement compliance regimes which require organizations to understand the quantity and nature of that data they’re ingesting. The Nightfall developer platform is designed to help organizations accomplish this with APIs that allow developers to stream data to our machine learning detectors for classification.
As organizations continue to rapidly adopt SaaS and cloud infrastructure, IT and security teams are becoming stretched. The expanding universe of business-critical cloud applications creates increased risk for the exposure of sensitive data like PII, PHI, as well as secrets and credentials. Cloud data protection is essential to ensuring employees follow best practices for handling sensitive data and that systems are configured in a manner that prevents unauthorized access.

