data_security

Global – – October 12, 2026 -- CrowdStrike has made Falcon Data Security for SaaS generally available, starting with Microsoft 365 coverage across SharePoint, OneDrive and Copilot, with plans to add more SaaS applications over time.

Platform classifies PII, PHI and payment card data as files change

The product continuously discovers and classifies sensitive data as files are accessed, modified and shared. Out-of-the-box patterns cover personally identifiable information, protected health information and payment card data, and custom patterns can be added for business-specific content. A classification engine shared across SaaS, endpoint and cloud is meant to close policy gaps between disconnected tools.

New York City – October 12, 2026 -- S-Docs has achieved SOC 2 Type II compliance for its HubSpot product, passing an independent audit of how it safeguards customer data over an extended period.

The assessment, developed by the American Institute of Certified Public Accountants (AICPA), tests whether security controls are well-designed and consistently operating in practice. It draws on the AICPA's Trust Services Criteria: security, availability, processing integrity, confidentiality and privacy.

Audit covered six control areas at S-Docs

The audit included control testing and operational analysis across security monitoring, access controls, incident response, disaster recovery, business continuity and internal risk management. S-Docs says the results confirm repeatable security practices in its day-to-day operations.

New York City – – October 12, 2026 -- Among regulated organizations that report financial damage from document workflow failures, 21% put the cost at $500,000 or more, according to a new S-Docs report, The Regulated Workflow Divide. The survey of 600 U.S. professionals in healthcare, financial services and the public sector also found that about 50% of organizations expose sensitive data outside their system of record.

Fragmented tooling drives much of the exposure. Some 69% of organizations route critical documents through three or more tools, and 76% use more than one tool for the same document-related function. Employees lose roughly 25% of their workweek re-entering data, reformatting documents and compensating for disconnected systems.

Houston – October 08, 2026 -- OptiSigns, a digital signage company powering more than 200,000 screens worldwide, has expanded its dashboard apps to work with Microsoft Power BI, Salesforce, Tableau, Grafana, Databricks and other business intelligence platforms, letting companies display automatically updating live dashboards on TVs in offices, factories and operations centers.

BI tools sit unused despite $70 billion in annual spending

Companies spend more than $70 billion a year on business intelligence software, according to HG Insights, yet research from BARC and Eckerson Group found only about a quarter of employees actively use BI tools. A 2016 meta-analysis of 138 studies published in Psychological Bulletin found that tracking progress helps people reach goals, with stronger effects when results are shared publicly rather than kept private.

Kenai, Alaska – September 26, 2026 -- The Kenaitze Indian Tribe (KIT) has begun notifying individuals whose protected health information may have been compromised in a network intrusion detected on September 26, 2026.

Unauthorized actor accessed KIT network for 11 days in July 2026

KIT's investigation, conducted with cybersecurity specialists, determined that an unauthorized party gained access to the tribe's network between July 16 and September 26, 2026, and may have accessed or downloaded certain files during that window.

Exposed data includes Social Security numbers and medical records

A comprehensive file review identified that compromised information may include first and last names, Social Security numbers, driver's license or state identification numbers, financial account numbers, dates of birth, medical information, and health insurance details.

Montreal – September 24, 2026 -- Seventy-seven percent of organizations experienced at least one Microsoft 365 governance incident in the past year, even as two-thirds now run multiple AI tools against the same tenant content, according to the second annual State of M365 report released by ShareGate.

Three-quarters of organizations report Microsoft 365 governance incidents in the past year

The survey of nearly 1,800 IT professionals and leaders across nine countries found 38% left former employees or guests with access they should have lost, 35% hit an audit or compliance gap, and 26% had sensitive content reach the wrong people. A fifth incident category -- users unable to find content -- was reported by 41% but excluded from the headline figure, which would otherwise reach 82%.

Omaha – September 15, 2026 -- SecureSky has acquired Soveren, a London-based Data Security Posture Management (DSPM) provider, adding real-time sensitive-data discovery and classification to its Continuous Threat Exposure Management (CTEM) platform.

Soveren claims 98% accuracy detecting sensitive data in encrypted traffic

Soveren's architecture pairs eBPF-powered network analysis with ML-driven classification, enabling it to inspect and classify encrypted TLS traffic at scale without impacting application speed. The company positions this against legacy DSPM tools that rely on regex detection and static snapshots, which it says produce high false-positive rates.

New York – September 12, 2026 -- Eligible, Inc. has completed its SOC 2 Type II examination for its Platform Services System with zero exceptions across all four Trust Services Categories evaluated: Security, Availability, Processing Integrity, and Confidentiality.

Independent assessor A-LIGN confirms full compliance across audit period

The examination, conducted by third-party assessor A-LIGN, evaluated the design and operating effectiveness of Eligible's controls over a defined audit period, covering the REST APIs, application infrastructure, and supporting services that process HIPAA-mandated healthcare financial transactions. These include eligibility verification (270/271), claims (837/276/277), remittance (835), and acknowledgements (TA1, 997, 999).