zdr

LLM 제공업체를 위한 제로 데이터 보존ZDR 최종 업데이트: 2026년 4월 LLM API 사용 시 데이터 프라이버시를 유지하는 실용적인 가이드입니다. 규제 산업의 엔지니어를 위해 제로 보존 엔드포인트, 자체 호스팅, 규정 준수 요구 사항 및 데이터 보호 패턴을 다룹니다. 목차 어떤 접근 방식이 나에게 적합한가? 위협 모델 제공업체 참조 OpenAI Anthropic Google Vertex AI Azure OpenAI AWS Bedrock Mistral AI Groq Fireworks AI Together AI Cohere...

Nullify

Nullify 안전. 투명. 무효화Nullified. Nullify는 오픈 소스, 모듈형 데이터 보존, 삭제 및 수명주기 거버넌스 플랫폼입니다. 분산 데이터 환경 전반에 걸쳐 데이터 발견, 보존 정책 평가, 통제된 수명주기 작업 실행, 검증 가능한 감사 기록 유지를 위한 중앙 집중식 프레임워크를 제공합니다. Nullify는 사양 우선specification-first 아키텍처를 중심으로 설계되었습니다. 핵심 모듈은 데이터 수명주기 거버넌스에 필요한 기본 기능을 제공하며, 선택적 플러그인 모듈은 추가 커넥터, 규정 준수 프레임워...

Mattermost Server 10.11.x < 10.11.23 / 11.7.x < 11.7.8 / 11.8.x < 11.8.5 / 11.9.x < 11.9.1 Incorrect Authorization (MMSA-2026-00702)

The version of Mattermost Server installed on the remote host is affected by a vulnerability as referenced in the MMSA-2026-00702 advisory. - Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to sanitize Team objects returned by the data retention team...

EUVD-2026-78160

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 Fail to sanitize Team objects returned by the data retention teams endpoint which allows an authenticated user holding only the read-only Data Retention Policy permission to obtain a private team's secret...

CVE-2026-91181

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 Fail to sanitize Team objects returned by the data retention teams endpoint which allows an authenticated user holding only the read-only Data Retention Policy permission to obtain a private team's secret...

CVE-2026-91181 Data Retention Teams Endpoint Leaks Private Team Invite ID

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 Fail to sanitize Team objects returned by the data retention teams endpoint which allows an authenticated user holding only the read-only Data Retention Policy permission to obtain a private team's secret...

CVE-2026-91181

CVE-2026-91181 affects Mattermost versions 11.9.0 and earlier, 11.8.4 and earlier, 11.7.7 and earlier, and 10.11.22 and earlier. The data retention teams endpoint (GET /api/v4/data_retention/policies/{policy_id}/teams) fails to sanitize Team objects, allowing an authenticated user with only the r...

CVE-2026-91181 Data Retention Teams Endpoint Leaks Private Team Invite ID

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 Fail to sanitize Team objects returned by the data retention teams endpoint which allows an authenticated user holding only the read-only Data Retention Policy permission to obtain a private team's secret...

PT-2026-91745

Name of the Vulnerable Software and Affected Versions Mattermost version 11.9.0 Mattermost versions 11.8.x through 11.8.4 Mattermost versions 11.7.x through 11.7.7 Mattermost versions 10.11.x through 10.11.22 Description An issue exists where Team objects returned by the data retention teams...

Flock wants privacy to meet surveillance halfway

Flock Safety CEO Garrett Langley says the United States needs a “compromise” between privacy and public safety. It's a neat phrase, except I don’t like to see “compromise” and “privacy” that close together. “When people talk about just one of these, privacy or safety, they’re prioritizing the wro...

Microsoft SQL Server Backup Policy Retention: Behavior and Recommendations

Challenge When a Microsoft SQL Server Backup Policy fails consistently for an extended period, restore points created by that policy may be removed if the Remove deleted items data after option is enabled in that policy. Cause This behavior occurs because the Remove deleted items data after optio...

CVE-2026-60074

A flaw was found in Date::Manip. This vulnerability allows an attacker to provide specially crafted input containing non-ASCII decimal digits to the Date::Manip library for Perl. The library's parsing logic incorrectly processes these digits, truncating the input and resulting in an inaccurate da...

MIT to Become Hotbed of AI Video Surveillance

It's a lot: According to information obtained by The Tech , MIT is spending over $3 million on more than 500 AI surveillance cameras in academic buildings, residence halls, and outdoor areas along Memorial Drive. Installation of the new cameras, along with the wiring and infrastructure that will...

Samsung backs down on threat to delete health data

If you pay for something, you expect it to work as intended. The vendor shouldn't start turning features off just because you won't accept its new rules. Someone should tell Samsung, which just upset users of its health app by threatening exactly that—before changing course after a user backlash...

Governing Claude Enterprise in Environments Where Inline Controls Can't Go

TrendAI™ integrates the Claude Compliance API into TrendAI Vision One™ through two collectors that bring AI-aware visibility and detection to Claude Enterprise usage: one keeps all data inside the environment, while the other feeds TrendAI Vision One™ for deeper correlation and compliance...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a platform and device driver data retention error, which could lead to driver uninstallation failures and...

Cybercrime and Computer Forensics in Epoch of Artificial Intelligence in India

The integration of generative Artificial Intelligence into the digital ecosystem necessitates a critical re-evaluation of Indian criminal jurisprudence regarding computational forensics integrity. While algorithmic efficiency enhances evidence extraction, a research gap exists regarding the Digit...

HCLTech DRAGON 安全漏洞

HCLTech DRAGON is a data retention / archiving / mass data storage and retrieval solution from HCL Corporation, USA. A security vulnerability exists in HCLTech DRAGON versions prior to 7.6.0, which stems from a missing instruction and could lead to the remote execution of arbitrary code...

HCLTech DRAGON 安全漏洞

HCLTech DRAGON is a data retention / archiving / mass data storage and retrieval solution from HCL Corporation, USA. A security vulnerability exists in HCLTech DRAGON versions prior to 7.6.0 that stems from the API not enforcing a request number or size limit, which could lead to remote execution...

New Data Security Requirements and the Proceduralization of Mass Surveillance Law after the European Data Retention Case

This paper discusses the regulation of mass metadata surveillance in Europe through the lens of the landmark judgment in which the Court of Justice of the European Union struck down the Data Retention Directive. The controversial directive obliged telecom and Internet access providers in Europe t...