The 2026 Annual Digital Exposure Report is now available.

Download the Report

Resources

360 Privacy Knowledge Hub

Whether you’re managing digital risk or building your understanding, these resources are here to support you. With expert insights and practical strategies, our content, guides, and events are designed to help you stay informed and prepared in a shifting threat landscape.

people watching a talk at a conference
Article

What GSX 2025 Tells Us About the Next Era of Security Leadership 

GSX 2025 brought together thousands of security professionals from around the world to share ideas, challenge assumptions, and explore emerging threats and technologies. From the main stage to side sessions and hallway conversations, one theme was clear: the role of the security leader is evolving quickly. Success now depends on questioning long-standing practices, adopting new …

Article

How AI Is Changing the Rules of Executive Protection

From doxing sites to AI-assisted phishing, the risks are growing. In this interview, Chris Wingfield reveals why AI is changing the game for security teams and how leaders can turn it to their advantage.

Article

AI Is Exposing PII: What Security Leaders Should Know

AI has lowered the barrier for exposing sensitive executive data, putting PII within reach of anyone with a motive. In this Q&A, Wesley Flatt of 360 Privacy explains the threat and how security teams can respond.

Article

When Activism Crosses the Perimeter: Employee Activism and the New Risk Frontier

In late August, a group of protesters entered Microsoft’s Redmond headquarters and staged a sit-in inside the office suite of company president Brad Smith. The group, calling itself No Azure for Apartheid, livestreamed the action, unfurled banners, and demanded the company cut ties with Israel. Seven people were arrested. Two employees were later terminated for breaching …

Article

Zero-Click Phishing: Attacks That Trigger Just by Previewing an Email

Executive Summary Between July and August 2025, 360 Privacy’s Cyber Security Team observed a surge in weaponized SVG-based phishing attacks impersonating Microsoft communications. These emails bypass traditional endpoint detection by leveraging JavaScript-embedded SVG payloads, triggering upon mere preview in browser-based clients like Outlook Web Access (OWA)—executing zero-click phishing via the victim’s browser. Despite appearing to …

photo by Tima Miroshnichenko
Article

When the Opt-Out Fails: Data Brokers, Assassination Culture, and the Rising Risk to Leaders

In June, a group of researchers from UC Irvine published a comprehensive audit of data brokers registered under the California Consumer Privacy Act (CCPA). The objective: test whether consumers could meaningfully exercise their legal right to opt out of data collection and sale. What they found is both alarming and somewhat validating: • Over 40% …

Article

Digital & Physical Security

Watch this great conversation with Jamie Korenoski from TSS where we talk risk and threat management, as it pertains to the company, its employees, and their families.