Sometimes the good guys fight back and win. Trustwave’s 2019 Global Security Report found that median time to detect and contain a data breach dropped from 93 days in 2017 to 41 days in 2018. Incidents related to Point of Sales systems went down sharply as merchants made wider use of chip cards. But there’s plenty of work remaining: Trustwave found at least one vulnerability in every application it examined; the media was 15 vulnerabilities of which 9% were high risk or critical.

Finally, SAP has launched a B2B version of its Customer Identity and Access Management (CIAM) product. It will help companies manage business partners’ and customers’ access to internal data and content while complying with privacy and data protection rules. SAP bought the Gigya CIAM system in 2017.

Google will pay to carry stories from Canadian news outlets under an agreement announced yesterday.  Details are sparse but the process for compliance with government’s C-18 law has been simplified to meet some Google objections.  Meta, the only other firm required to make payments under the law, has not changed its decision to block reliable news.