Posts tagged: Compliance
Page 7View all articles
-
Fairchild Medical Center & Boone Health Settle Pixel Lawsuits
Fairchild Medical Center and Boone Health settled pixel lawsuits with the Office for Civil Rights; see how tracking pixels can violate HIPAA privacy rules.
-
Poisoned Update Attacks and AI DevOps Defense
How poisoned updates, training data, and deployment pipelines make AI behavior drift quietly, and the defenses that treat every update as an attack input.
-
Secure Your AI Gateway: GitLab Patches a Critical Flaw
GitLab patches critical 9.9 ai gateway flaw allowing arbitrary commands. Learn how to secure self-hosted deployments and mitigate data exfiltration risks.
-
CMMC Patient Portal Compliance Checklist for Secure Access
A CMMC patient portal must follow NIST SP 800-171 when it holds CUI from a DoD contract. This guide explains the triggers, assessment steps, and scope controls.
-
Make Tmux the OS
Explore how to make tmux the os while meeting NIST, CMMC, and HIPAA standards. This guide details security controls and a phased roadmap for deployment.
-
Why a Private AI Appliance Secures Your Firm's Data
A private AI appliance runs open-weight AI models on-site, keeping CMMC and HIPAA data off public cloud APIs. See hardware sizing, costs and setup steps.
-
PCI-Proof AI Voice Payments That Cut Manual Handoffs
AI voice agent PCI compliance means keeping card data out of the AI layer, with tokenized payment modules and deterministic flows that cut handoffs.
-
Rolling the cyber dice with open-source and open-weight AI models
How attackers exploit open-source and open-weight AI models through replication and model inversion, and the governance layers that make adoption safe.
-
Google Enters Cyber AI Race With Gemini 4 Argon
Why the Gemini 4 Argon phased rollout matters for regulated teams moving cyber AI from pilots to production, and the governance steps that keep it safe.
-
EU Cyber Resilience Act Playbook for Securing Kubernetes
This CRA playbook maps the Cyber Resilience Act onto Kubernetes supply chains: responsibilities, vulnerability handling, updates and audit ready evidence.
-
Jevotron: Multiple Jev integrations from the command line
Jevotron lets admins launch Jev containers from a command line, bypassing change management. Learn the controls that keep these integrations compliant.
-
Livenerf: Has Opus 5.5 been nerfed yet?
Livenerf showed how a flaw in the Opus 5.5 audio codec can run arbitrary code, and what regulated firms should fix in patch and supply chain controls.
