Secure Your Future

Author: Steven R. Combs

Agentic AI Compliance for Law Firms: What a 36% Score Means

Agentic AI compliance infographic showing a benchmark comparison chart with a 36.2% best-performing AI agent pass rate versus under 25% for most frontier AI models, alongside compliance checklist, security shield, and AI governance icons.

Agentic AI Compliance for Law Firms: What a 36% Score Means August 5, 2026 There’s a number worth sitting with before your firm signs off on another agentic AI pilot: 36.2 percent. That’s the best score any AI agent configuration managed on a new benchmark called HANDBOOK.md , published on arXiv, July 28 by a […]

Agentic AI: Zero Risk Isn’t the Job—A CISO’s Guide to Smarter AI Containment

Agentic AI security assessment showing a CISO reviewing an AI agent access map, permissions dashboard, and vendor risk controls on a laptop in a modern law office.

Agentic AI: Zero Risk Isn’t the Job—A CISO’s Guide to Smarter AI Containment August 3, 2026 Here’s a sentence I did not expect to write this year: a leading AI lab hacked its own customers by accident. Not maliciously. Not through some elaborate exploit. Through a misunderstanding about whether a test environment had internet access. […]

AI Vendor Risk for Law Firms: 4 Questions After a Rogue AI Attack

AI vendor risk law firms comparison graphic showing a two-column checklist contrasting what traditional AI vendor contracts cover today versus the additional protections organizations should require after an autonomous AI agent incident, including disclosure timelines, trace access, investigation costs, and data handling requirements.

AI Vendor Risk for Law Firms: 4 Questions After a Rogue AI Attack July 31, 2026 On July 24, OpenAI told the world something that hadn’t happened before, not in public anyway. One of its own AI models had gone into Hugging Face’s systems on its own and started poking around. Not a hacker using […]

AI Risk Mitigation for Law Firms: 3 Laws Reshaping the Landscape

AI risk mitigation for law firms illustrated with a professional legal compliance graphic featuring Texas TRAIGA, the Illinois AI Audit Law, and the proposed AI Kill Switch Act alongside legal and cybersecurity symbols representing modern AI governance and regulatory compliance.

AI Risk Mitigation for Law Firms: 3 Laws Reshaping the Landscape July 29, 2026 Three weeks ago, a general counsel asking “what AI law actually applies to us” had a fairly short answer. Not anymore. In the span of about two weeks, Illinois signed the first law in the country requiring frontier AI developers to […]

AI Agent Security for Law Firms: Anthropic’s 4 Questions

AI agent security framework showing four governance checkpoints—Ingestion, Actions, Blast Radius, and Observability—flowing through an approval decision process for secure AI agent deployment in a modern law firm environment.

AI Agent Security for Law Firms: Anthropic’s 4 Questions July 24, 2026 Anthropic’s own Deputy CISO just told other security leaders something most vendors won’t say out loud: zero risk isn’t the job. Jason Clinton published a guide last week called “Zero risk isn’t the job: a CISO’s guide to agentic AI,” and it lays […]

AI Agent Governance for Law Firms: The 12% Problem

AI agent governance for law firms illustrated with a three-part governance framework showing agent identity, access boundaries, and audit trail within a modern legal office environment.

AI Agent Governance for Law Firms: The 12% Problem July 22, 2026 Ninety six percent of enterprises are running AI agents right now, in production, doing real work. Only twelve percent of them have a centralized way to actually govern what those agents are doing. That number comes from OutSystems’ 2026 State of AI Development […]

AI Vendor Risk Assessment for Law Firms: 4 Red Flags

AI Vendor Risk Assessment for Law Firms: Understanding the AI Jailbreak Severity Score. Digital illustration showing an AI jailbreak severity score gauge with a legal scale and neural network background, representing AI vendor risk assessment and AI governance for law firms.

AI Vendor Risk Assessment for Law Firms: 4 Red Flags July 15, 2026 Anthropic, Microsoft, Amazon, and Google agreed on something this week, and I honestly can’t remember the last time that sentence made sense to write. The four of them have proposed a shared way to score how bad an AI jailbreak actually is, […]

The AI Confidentiality Risk in Your Firm’s Claude Pro Account

AI confidentiality risk illustrated by a secure laptop displaying an AI security interface beside confidential legal documents and the scales of justice, representing data protection challenges for law firms using AI tools.

The AI Confidentiality Risk in Your Firm’s Claude Pro Account July 15, 2026 Anthropic’s updated privacy policy took effect on July 8, and buried inside it is a line that should worry every managing partner whose associates use Claude for quick research between meetings. The company can now share user conversation data with law enforcement […]

Microsoft Copilot Governance: 5 Changes for Law Firms

Microsoft Copilot governance dashboard highlighting Agent 365 licensing, AI watermarking, partner compliance requirements, and data protection for modern law firms.

Microsoft Copilot Governance: 5 Changes for Law Firms July 13, 2026 If your firm rolled out Microsoft 365 Copilot sometime in the last year and hasn’t touched the governance settings since, July was the month that decision came back around. Microsoft pushed through three separate changes this month, new licensing prerequisites for Agent 365, an […]

Microsoft 365 Default Settings: 5 Critical Security Changes to Implement Right Now

Microsoft 365 default settings: A cybersecurity infographic detailing tenant security modifications on a light background with abstract shapes. At the top center, the green and blue node network logo for Cocha Technology is displayed below their name. In the center, an illustrated open gray hand holds a wireframe umbrella sheltering a blue sphere adorned with small padlocks. Thin lines branch out from the centerpiece to five distinct navy and gray strategy cards: "MFA ENABLEMENT" with a user icon, "EXTERNAL ACCESS CONTROL" mapping a network path, "DATA CLASSIFICATION & DLP" featuring a data chart and shield, "LEGACY PROTOCOL BLOCK" showing a prohibited floppy disk and mail icon, and "AUDIT LOGGING ENABLEMENT" displaying a checklist and a small weekend calendar logo. A blue pill-shaped button at the bottom reads "SECURE DEFAULT SETTINGS NOW".

Microsoft 365 Default Settings: 5 Critical Security Changes to Implement Right Now July 10, 2026 When navigating cloud business tools, there is a massive difference between an environment that is merely “functional” and one that is genuinely “defensible.” As we have unraveled throughout this series, relying on factory-default parameters is an active operational liability. Leaving […]