Security and regulation
Software vendor due diligence for security and ownership
A buyer checklist for security, integrations, data roles, ownership, support, and exit planning before signing a software contract.
Topic
Cybersecurity
Articles and decision guides on Cybersecurity.
Security and regulation
Chinese vs American AI Models: Should Your Business Use Them?
Model origin is only part of the decision. Compare hosted APIs and self-hosting through data access, service terms and the cost of a completed business task.
Security and regulation
NIS2 for developers: Security baseline for SaaS, ERP and HR systems
Your enterprise clients will start sending NIS2 compliance questionnaires. Here's what software companies need to know about security baselines, incident response, and supply chain obligations.
Security and regulation
QR Sticker Phishing. Verify the Request Before Paying
MIRRI flagged fake government sites and QR stickers on cars. Verify requests through a separate channel and give employees a clear reporting route.
Security and regulation
Your website may be compromised without going down
A site can remain available while an external script leaks visitor data. How to inspect loaded resources and what Cloudflare monitoring covers.
Security and regulation
GitHub Actions in 2026. Lockfiles and safer runs
Workflow lockfiles are in public preview. How to separate available controls from roadmap promises and review dependencies, credentials and outbound access.
Security and regulation
AI CyberLab: What's Realistic About AI in Cyber Defense Today
The AI CyberLab proposal does not establish detection performance. Where to test AI in cyber defense and how to assess a pilot before deployment.
Security and regulation
AI Phishing and Deepfakes. Verify the Sensitive Request
Correct language and a familiar voice do not establish identity. Verify bank-detail changes through a known contact and rehearse the team response.
Security and regulation
DORA for IT Suppliers. Prepare Evidence for Your Customer
A financial customer needs evidence that its ICT service is managed. What to agree in the contract and how to test recovery and incident communication.
Security and regulation
Google's Private AI Compute: Balancing Power and Privacy
Google describes protected cloud processing for selected Pixel features. See what the architecture protects and what the announcement does not establish for business data.