Explain This: The SEC Cyber 8-K Rule (Materiality, 4 Days, and the Mistake That Gets You Sued)
Most incident response plans are written like the only audience is the SOC.
Latest
Explain This: When Lexis Stops Being a Research Tool and Starts Being Your Firm’s Operating System
Lexis is not just shipping another legal AI feature. It is trying to become the workflow layer firms route drafting, review, and knowledge through.
Policy Roast: Decline All Should Mean Decline All
If a site says decline all but still fires trackers, the banner is not consent. It is evidence.
Exhibit A(I): The lawsuit that vanished after a breach (Thompson Coburn, New Mexico)
Exhibit A(I): The lawsuit that vanished after a breach (Thompson Coburn, New Mexico)
A lot of breach coverage is noise. This week’s useful signal is a court move that barely looks like a move at all: plaintiffs dropping a data-breach case tied to law firm Thompson Coburn and
Breach Autopsy: When Ransomware Hits Your Chip Tester, the Entire Tech Supply Chain Has a Problem
Breach Autopsy: When Ransomware Hits Your Chip Tester, the Entire Tech Supply Chain Has a Problem
Incident: Advantest Corporation ransomware attack
Disclosed: February 19, 2026
Company: Leading semiconductor test equipment supplier (TSE: 6857)
Impact: Active incident response underway, certain systems may be compromised, supply chain ripple effects TBD
Lesson: Semiconductor
Breach Autopsy: PayPal's "Application Error" That Took Six Months to Detect
PayPal disclosed that a coding error exposed loan application data, including Social Security numbers, for six months before detection.