Third-Party Risk

Meta’s New Commercial Terms: Your Business Website Becomes Part of the Deal

Meta’s October 30 commercial terms authorize broad website scraping for advertising and business products. What changed, what remains uncertain, and what businesses should review now.

The KDDI Breach: One Vulnerable Component, Six ISPs, 12 Million Exposed Inboxes

A zero-day in unnamed third-party software let attackers sit inside KDDI's shared ISP email platform for a month, exposing email addresses and passwords used by @nifty, BIGLOBE, J:COM, and three other providers. Here's what's confirmed and what isn't.