Two House committees asked DoorDash for seven categories of records by August 14, covering every Chinese-developed AI model it has evaluated or used since January 2025. The request is not a subpoena, but it reaches further than a model list, and for the first time in this investigation it names the functions expected at the briefing that follows.
DoorDash AI inquiry turns model selection into a governance test Read More »
On a preliminary record, the Ninth Circuit made the user, not Perplexity, the party accessing Amazon under the CFAA and California’s CDAFA. The records of that access can sit partly with an outside operator that no litigation hold reaches by default.
Ninth Circuit vacates Amazon injunction; AI agent logs emerge as eDiscovery issue Read More »
Read the recent AI evaluation disclosures involving four labs as one repeated failure and you get it wrong. A novel exploit, a misconfiguration and a leaky allowlist are different problems, but they share a weak layer, an unanswered liability question, and a preservation gap that lands on legal and information governance teams.
Recent AI evaluation incidents expose gaps in containment, configuration and evidence Read More »
The European Commission fined Google €890 million and required compliance within 60 days. The harder problem is evidentiary: gatekeepers face growing pressure to document how ranking decisions were made, not simply to change them.
Google’s €890 million DMA penalty package starts a 60-day compliance clock Read More »
Federal prosecutors called Angelo Martino a double agent: hired to negotiate with BlackCat, he armed the attackers with his clients’ insurance limits while five victims paid $75.3 million, court records show. His 70-month sentence puts the breach-response supply chain on notice.
The negotiator was the leak: insider who betrayed ransomware victims gets 70 months Read More »
HaystackID advanced to Band 2 in the 2026 Chambers Crisis & Risk Management Guide and maintained Band 2 in the Chambers Litigation Support Guide, extending a nine-year recognition run. The rankings reflect growing overlap between cyber incident response, privacy review, regulatory disclosure and litigation support, as legal and compliance teams increasingly seek providers that can combine speed, technical depth and defensible workflows under one roof.
HaystackID earns Band 2 rankings in two 2026 Chambers guides Read More »
At LegalTechTalk London, HaystackID’s John Wilson and Cyril Amarchand Mangaldas’ Komal Gupta examined how deepfakes, business email compromise, and weak cyber governance can converge into multimillion-dollar losses. Their practical message: rehearse response plans, share cyber risk across functions, and use verbal-only challenge phrases before approving high-risk decisions.
At LegalTechTalk, the password is blueberry hot dogs Read More »
GitHub disabled 73 Microsoft repositories after the Miasma campaign re-compromised Azure’s durabletask project, while researchers separately documented Miasma payloads that can detonate when developers open affected repositories in AI coding agents such as Claude Code and Cursor. Here is how the campaign spreads and what security, compliance and eDiscovery teams should do now.
When the worm targets the assistant: Miasma turns AI coding agents into the trigger Read More »
At the Dublin Tech Summit, two HaystackID forensics leaders argued that deepfakes have broken the 30-year-old integrity test for digital evidence, and laid out a 90-day plan for proving authenticity under the EU AI Act, NIS2, DORA and the proposed Rule 707.
When you can’t trust the evidence: deepfakes force a forensic reckoning in Dublin Read More »
ShinyHunters defaced Canvas login pages Thursday and set a May 12 deadline, putting Instructure’s claimed 275-million-record haul at the center of FERPA, GDPR and litigation-hold work for 9,000 schools.
Canvas Breach Moves from Disclosure to Demand as ShinyHunters Sets May 12 Deadline Read More »
Artificial intelligence is moving from promise to proof in cybersecurity. Organizations using AI extensively in security have cut average breach costs by $1.9 million and shortened breach lifecycles by about 80 days, according to data anchoring a new World Economic
AI in Cybersecurity Moves from Promise to Proof as WEF and KPMG Track Defender Gains Read More »
Two former cybersecurity professionals, one from Sygnia and one from DigitalMint, were sentenced April 30 to four years each for running BlackCat ransomware against U.S. companies — the first federal prison term in this country for an incident-response and ransomware-negotiation insider conspiracy.
A 48-Month Federal Benchmark Resets the Incident-Response Insider Question Read More »
