사이버 보안

Customer trends toward vendor consolidation in cybersecurity may favor competitors offering broader platforms.

We expect that we and our third-party service providers and strategic partners will continue to experience cybersecurity attacks and incidents in the future.

AI also amplifies cybersecurity threats.

Risk Factors— Risk Related to Cybersecurity, Privacy, and Regulatory Requirements” heading.

•investor and market perceptions regarding AI-related disruption to software companies and the cybersecurity industry;

For example, code generated by AI could include errors, deficiencies, or vulnerabilities that increase our exposure to cyberattacks.

Data Privacy, Cybersecurity and Intellectual Property Risks

We may incur liability or suffer reputational harm for cybersecurity even if we do not control the applicable security measures or if we are not at fault.

The rapid advancement and widespread dissemination of artificial intelligence technologies significantly increases the risks associated with cyberattacks.

Additionally, cybersecurity and data security and protection laws and regulations are evolving and present increasing compliance challenges, which may increase our costs, affect our competitiveness, cause reputational harm and expose us to substantial fines or other penalties.

Furthermore, from time to time, U.S. presidential administrations have issued, and may in the future issue, Executive Orders related to cybersecurity practices that may affect our business.

We manage AI-related risks through our existing cybersecurity, privacy, legal, compliance, information governance, and enterprise risk management processes.

RISKS RELATED TO CYBERSECURITY OR MISAPPROPRIATION OF OUR CRITICAL INFORMATION

•actual or perceived significant data privacy or cybersecurity incidents involving our advertising solutions;

We or our third-party product and service providers may not be able to anticipate, identify, or implement effective preventive measures against cyberattacks or data security incidents and, even if timely identified, we or our third-party product and service providers may not be able to remediate such attacks or incidents in a timely and effective manner, or to mitigate or avoid adverse impacts resulting from any such

These technologies may be more costly than we currently anticipate, may not perform as expected, may require more time or expense to implement effectively than anticipated, may introduce operational or cybersecurity risks, or may fail to enhance productivity and maintain operational efficiency as expected.

Trends, Risks and Uncertainties Related to Cybersecurity and Data Privacy

of security breaches involving certain types of data.

The emergence and maturation of AI capabilities, including ones involving large language models, may enable new or more effective methods of cyberattacks, including deepfake impersonation, phishing, social engineering or the automated detection and exploitation of previously unknown vulnerabilities.

These systems are increasingly vulnerable to cybersecurity threats, which can significantly impact data security.

The failure to adequately adapt to this new environment or timely procure and deploy necessary mitigation may increase the risk of cybersecurity incidents, which may materially affect our business operations or our financial results.

As data protection, cybersecurity, and privacy laws continue to evolve, we may face additional reporting requirements to regulatory authorities.

•If we or our third-party service providers experience, or are unable to protect against cyber-attacks, ransomware, security incidents, or security breaches, or if unauthorized parties otherwise obtain access to our customers’ data, our data, or our platform and information technology systems, then our solution may be perceived as not being secure, our reputation may be harmed, demand for our platform and products ma

In addition to the GDPR, the EU has also enacted legislation that would regulate non-personal data and establish new cybersecurity standards, and other countries, including the U.K., may similarly do so in the future.

As a result, we are exposed to heightened risks of cyber-attacks or other security incidents.

See also, “Costs related to defective products could have a material adverse effect on us” and “Cybersecurity risks could adversely affect our business and disrupt our operations” for additional information.

They may also arise from incidents outside of our control, including third-party incidents, denial of service or ransomware attacks, as well as from our efforts to address vulnerabilities and security incidents.

For example, the recent escalation of hostilities in Iran has demonstrated the intent to target Western technology infrastructure and companies, including us, and has increased the risk that our systems, facilities, or third-party providers could be subject to physical or cyber attack.

Cybersecurity threats may also be enhanced, accelerated or facilitated by artificial intelligence, including through more sophisticated phishing, malware, social engineering, vulnerability discovery, credential attacks, deepfakes, automated intrusion attempts and other techniques.

See Item 1C, “Cybersecurity” of this Annual Report on Form 10-K for additional information about our cybersecurity processes.

As a cybersecurity provider, we have been, and expect to continue to be, a target of cyberattacks.

Cybersecurity risk to the company and its customers also depends on factors such as the actions, practices and investments of customers, contractors, business partners, vendors, the open source community and other third parties, including, for example, providing and implementing patches to address vulnerabilities.

EU Cybersecurity (NIS2),