Intellectual property security covers protecting inventions, source code, designs, and trade secrets from theft, exposure, and unauthorized use.
Search across headline titles and summaries.
Background for this topic.
Intellectual property (IP) consists of creations and information protected by law or by their commercial value, including inventions, software, source code, designs, content, trademarks, and trade secrets. In security reporting, the focus is usually on confidential business knowledge and digital assets whose unauthorized disclosure, alteration, or use could undermine ownership or competitive advantage. Unlike registered patents or trademarks, trade secrets depend on maintaining secrecy through reasonable safeguards.
Relevant attack surfaces include code repositories, engineering and design systems, cloud storage, email, collaboration tools, suppliers, and endpoints used by employees or contractors. Practical controls include least-privilege access, strong authentication, encryption, repository and download logging, data-loss prevention, and prompt removal of access when roles change. Organizations should classify IP so controls match sensitivity, monitor unusual transfers, and preserve evidence when suspected theft occurs; legal, privacy, and contractual requirements may affect investigation and disclosure. Security teams should also account for IP exposure when assessing third-party and insider risks.
Weekly headline count for the current query.
For years, routing traffic through cloud proxies was good enough. Then work moved to the browser, AI entered the workflow, and the inspection model stopped keeping up
If an autonomous AI agent interacts with your company's core intellectual property today, can your security team instantly name the person who authorized it? For most enterprises, the answer is a simple no
OpenAI has disclosed that two of its employee devices in its corporate environment were impacted via the Mini Shai-Hulud supply chain attack on TanStack, but noted that no user data, production systems, or intellectual property were compromised or modified in an unauthorized manner
North Korean information technology (IT) workers who obtain employment under false identities in Western companies are not only stealing intellectual property, but are also stepping up by demanding ransoms in order to not leak it, marking a new twist to their financially motivated attacks
Wing Security announced today that it now offers free discovery and a paid tier for automated control over thousands of AI and AI-powered SaaS applications. This will allow companies to better protect their intellectual property (IP) and data against the growing and evolving risks of AI usage
In today's digital landscape, around 60% of corporate data now resides in the cloud, with Amazon S3 standing as the backbone of data storage for many major corporations. Despite S3 being a secure service from a reputable provider, its pivotal role in handling vast amounts of sensitive data (customer personal information, financial data, intellectual property, etc.), provides a juicy target for
LUCR-3 overlaps with groups such as Scattered Spider, Oktapus, UNC3944, and STORM-0875 and is a financially motivated attacker that leverages the Identity Provider (IDP) as initial access into an environment with the goal of stealing Intellectual Property (IP) for extortion. LUCR-3 targets Fortune 2000 companies across various sectors, including but not limited to Software, Retail, Hospitality,
The stakes could not be higher for cyber defenders. With the vast amounts of sensitive information, intellectual property, and financial data at risk, the consequences of a data breach can be devastating. According to a report released by Ponemon institute, the cost of data breaches has reached an all-time high, averaging $4.35 million in 2022
One thing is clear. The "business value" of data continues to grow, making it an organization's primary piece of intellectual property
Microsoft is warning that the BlackCat ransomware crew is leveraging exploits for unpatched Exchange server vulnerabilities to gain access to targeted networks
An elusive and sophisticated cyberespionage campaign orchestrated by the China-backed Winnti group has managed to fly under the radar since at least 2019