Secure Your Future

Author: Steven R. Combs

AI Vendor Risk Assessment for Law Firms: 4 Red Flags

AI Vendor Risk Assessment for Law Firms: Understanding the AI Jailbreak Severity Score. Digital illustration showing an AI jailbreak severity score gauge with a legal scale and neural network background, representing AI vendor risk assessment and AI governance for law firms.

AI Vendor Risk Assessment for Law Firms: 4 Red Flags July 15, 2026 Anthropic, Microsoft, Amazon, and Google agreed on something this week, and I honestly can’t remember the last time that sentence made sense to write. The four of them have proposed a shared way to score how bad an AI jailbreak actually is, […]

The AI Confidentiality Risk in Your Firm’s Claude Pro Account

AI confidentiality risk illustrated by a secure laptop displaying an AI security interface beside confidential legal documents and the scales of justice, representing data protection challenges for law firms using AI tools.

The AI Confidentiality Risk in Your Firm’s Claude Pro Account July 15, 2026 Anthropic’s updated privacy policy took effect on July 8, and buried inside it is a line that should worry every managing partner whose associates use Claude for quick research between meetings. The company can now share user conversation data with law enforcement […]

Microsoft Copilot Governance: 5 Changes for Law Firms

Microsoft Copilot governance dashboard highlighting Agent 365 licensing, AI watermarking, partner compliance requirements, and data protection for modern law firms.

Microsoft Copilot Governance: 5 Changes for Law Firms July 13, 2026 If your firm rolled out Microsoft 365 Copilot sometime in the last year and hasn’t touched the governance settings since, July was the month that decision came back around. Microsoft pushed through three separate changes this month, new licensing prerequisites for Agent 365, an […]

Microsoft 365 Default Settings: 5 Critical Security Changes to Implement Right Now

Microsoft 365 default settings: A cybersecurity infographic detailing tenant security modifications on a light background with abstract shapes. At the top center, the green and blue node network logo for Cocha Technology is displayed below their name. In the center, an illustrated open gray hand holds a wireframe umbrella sheltering a blue sphere adorned with small padlocks. Thin lines branch out from the centerpiece to five distinct navy and gray strategy cards: "MFA ENABLEMENT" with a user icon, "EXTERNAL ACCESS CONTROL" mapping a network path, "DATA CLASSIFICATION & DLP" featuring a data chart and shield, "LEGACY PROTOCOL BLOCK" showing a prohibited floppy disk and mail icon, and "AUDIT LOGGING ENABLEMENT" displaying a checklist and a small weekend calendar logo. A blue pill-shaped button at the bottom reads "SECURE DEFAULT SETTINGS NOW".

Microsoft 365 Default Settings: 5 Critical Security Changes to Implement Right Now July 10, 2026 When navigating cloud business tools, there is a massive difference between an environment that is merely “functional” and one that is genuinely “defensible.” As we have unraveled throughout this series, relying on factory-default parameters is an active operational liability. Leaving […]

Microsoft 365 Compliance Tools: 3 Heavy Risks Threatening Your Government Bids

A detailed cybersecurity compliance infographic banner on a dark blue background with the Cocha Technology logo in the top left. The headline reads, "Are Your Microsoft 365 Compliance Tools Misconfigured?" above a subtitle about securing local municipal, federal, and cyber insurance approvals. On the right, a large glowing blue shield labeled "M365 COMPLIANCE" is surrounded by icons for Policies, Protection, Discover, Retention, and Monitor, with a digital city hall and government buildings silhouette behind it. The bottom half contains three organized sections outlining misconfiguration risks with red 'X' marks, approval criteria for Local Municipal, Federal, and Cyber Insurance, and a list of five key tools to configure properly: Sensitivity Labels, Data Loss Prevention (DLP), Information Governance, Audit & Activity Logs, and Insider Risk Management.

Microsoft 365 Compliance Tools: 3 Heavy Risks Threatening Your Government Bids July 8, 2026 Mid-way through 2026, the evaluation metric for securing corporate partnerships and lucrative municipal contracts has fundamentally shifted. There was a time when filling out a request for proposal (RFP) meant showcasing your operational capacity, your past performance, and your competitive pricing […]

Microsoft 365 License Features: 2 Main Options Compared for Lean Budgets

A professional software comparison infographic on a light blue textured background. Two prominent white frosted glass cards outline license features. The left card, titled "BUSINESS PREMIUM", lists Core Office Apps, Basic Email, Essential Security, and Business Features. The right card, titled "E5", lists Advanced Threat Protection, Cloud App Security, Identity & Access Mgmt, Full Compliance & Governance, Enterprise Voicemail, and Advanced Analytics. Between the cards, a central data node diagram is placed above the text "INTEGRATED M365 FEATURES" and the green and blue node logo for Cocha Technology. At the bottom, two dark blue pill-shaped buttons read "CYBERSECURITY FOCUS" on the left and "ENTERPRISE SCALE" on the right.

Microsoft 365 License Features: 2 Main Options Compared for Lean Budgets July 3, 2026 When a business reaches a certain level of growth, the financial decisions surrounding operational infrastructure start to compound rapidly. Every line item on your balance sheet is scrutinized, and software licensing is no exception. For many growing firms across Houston, there […]

Misconfigured Storage in Azure: Why One Public Blob Puts Your Entire Tenant at Risk

misconfigured storage: Cocha Technology infographic illustrating 6 dangerous cloud misconfiguration gaps in M365 and Azure, showing the breach path from identity and logging failures to compromised enterprise systems.

Misconfigured Storage in Azure: Why One Public Blob Puts Your Entire Tenant at Risk June 26, 2026 Back in late 2023, security researchers uncovered a massive data exposure incident that shook the tech world: a misconfigured storage bucket exposed a staggering 38 terabytes of private corporate information, including passwords, secret keys, and internal communication logs. […]