Blog

Picture applying to more than 100 jobs through the same screening platform and never landing a single interview. The vendor calls it an algorithmic anomaly. A federal judge in California saw a viable discrimination claim. On June 26, 2026, Judge Rita Lin denied Workday’s motion to dismiss in Mobley v. Workday Inc.. Fair Employment and…

A recent discovery ruling in Colorado is the clearest argument I’ve seen for why restrictive AI policies fail, and what to do instead. On August 31, 2026, a magistrate judge in Colorado resolved a routine-looking discovery fight and, in doing so, handed corporate America a free lesson in AI governance. The case was Dunn v….

There’s a conversation happening in boardrooms where cybersecurity doesn’t have a seat at the table. Risk registers track credit exposure, supply chain concentration, and litigation, while security findings circulate in a parallel universe of vulnerability counts and CVSS scores that no CFO can price. The consequence is that every security decision, funded or deferred, becomes…

There’s a settlement hiding in the public record that cost American Consumer Credit Counseling as much as two million dollars, and not a single tech blog covered it. The silence isn’t a conspiracy; nobody watched the Massachusetts Superior Court docket for case number 2581CV02933; part of that might be because their website’s not the friendliest….

In 2021, Krafton, the South Korean publisher behind PlayerUnknown’s Battlegrounds (PUBG), bought the game studio Unknown Worlds for $500 million. The deal promised the studio’s leadership another $250 million if they hit their revenue targets through December 2025, and it made firing them hard. “Cause” meant a felony, gross misconduct, leaking confidential information, or intentional…

Archer Daniels Midland is mostly out of the False Claims Act woods, and the story of how it got there is the most useful ruling on cyber-FCA enforcement in years. Nobody sued. Nobody settled. The relator, Mark Pannek, lost on paper, in a memorandum and order from Judge Sanjay Harjani of the Northern District of…

This week, two things happened involving the same federal document. On September 9, Washington Technology reported that the Cybersecurity Maturity Model Certification (CMMC) Phase 2 suspension had been “locked in with binding regulation,” a step change from a mere pause that would make reversal harder. The same week, the analysts at RedSpin compared the new…

On November 18, 2026, a Wisconsin state judge in Waukesha County will convene a final approval hearing for a class action settlement arising from a ransomware attack that began on April 27, 2022. Four years, six months, and a courtroom transfer separate the two dates, along with fourteen lawsuits, three failed mediations, a partially successful…

If you build software or hardware with digital elements and you sell it into Europe, the EU Cyber Resilience Act (CRA) stops being a someday problem this Friday, September 11. That’s when the regulation’s reporting obligations start. It’s not a registration deadline and not a paperwork deadline. It’s the moment the duty to notify regulators…

In March 2023, LockBit demanded $10 million from MCNA Dental. Management refused, the attackers published 700 GB of stolen data two days later, and everyone moved on. That refusal tends to get framed as courage in breach retrospectives. It wasn’t. It was a capital allocation decision made without anyone pricing the alternatives, and the invoice…

On December 14, 2020, one day after the SolarWinds breach became public knowledge, monitoring software on a Honeywell network started firing alerts. Between 9:30 in the morning and midnight Central Time, it logged: A manager looked at the logs and concluded, “I don’t see anything concerning based on the available evidence.” The three-hour session with…

In August 2026, California’s Department of Financial Protection and Innovation (DFPI) ordered Academy Mortgage to pay $825,000 for failing to protect the personal information of 284,443 people. That penalty was the smallest line on a much larger invoice. My estimate, built from IBM’s 2026 Cost of a Data Breach benchmarks scaled to Academy’s size, puts…