Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

reach security

Don't Let Configuration Drift Reopen PHP2Shell Attack Paths

Nov 11, 2026 By Garrett Hamilton In Reach Security
Key Takeaways: Configuration drift can reopen attack paths. Changes to firewall rules, inspection settings, or endpoint policies can expose vulnerable systems that were previously protected. ‍ Vulnerability exposure changes even when the CVE doesn't. Security teams need to reassess reachability and existing protections as configurations and exploit intelligence evolve. ‍ Reach connects configuration drift to vulnerability exposure.
Read Post
reach security

Disrupt PHP2Shell Post-Exploitation with CrowdStrike Controls

Nov 11, 2026 By Garrett Hamilton In Reach Security
Key Takeaways: Reachability determines exposure. Two servers with the same PHP2Shell vulnerability can face different levels of risk depending on accessible attack paths and existing protections. CrowdStrike can help disrupt post-exploitation activity. Falcon capabilities can detect or block malicious behaviors, including suspicious processes and command execution, even when a vulnerable service remains reachable. Effective protection depends on configuration.
Read Post
sophos

Your training data is boring: Anomaly detection with LLMs

Nov 11, 2026 By Ben Gelman In Sophos
The Sophos AI team presents new research on anomaly detection Following on from research presented at Black Hat USA 2025, Sophos data scientists Ben Gelman, Tamas Nyiri, and Tibor Kristóf Lányi recently showcased new work on anomaly detection at BSides Las Vegas 2026. As promised, we’re sharing more details of that research (the recording of the talk is also available here). Supervised classifiers in cybersecurity are often trained on data that doesn't capture the most unusual examples.
Read Post

3 Things to Check Before Choosing an LLM Vendor (GDPR) #ai #llm

Nov 11, 2026 By Protecto In Protecto
Does GDPR require your LLM data to stay in the EU? No. GDPR doesn’t require personal data to stay in the EU, but you can only transfer it outside the EU with a valid mechanism, such as an adequacy decision or standard contractual clauses. Many European enterprises keep data in the EU anyway, partly because of the Schrems II ruling and partly because of ongoing uncertainty around the EU-US Data Privacy Framework.
View Video
One Identity Unveils Identity Manager 10.0 LTS with AI and Modern UX

One Identity Unveils Identity Manager 10.0 LTS with AI and Modern UX

Nov 10, 2026 By One Identity In One Identity
One Identity today unveiled Identity Manager 10.0 LTS, modernizing the identity governance experience with browser-based administration, AI-assisted insights and streamlined automation for everyday identity operations. Of the three products, Identity Manager 10.0 LTS provides the clearest UI modernization story. Its new browser-based experience provides administrative functionality without requiring a traditional local desktop installation, helping create a more accessible and unified cross-platform experience. See the Identity Manager 10.0 LTS feature upgrades.
Read Post
Teleport Beams, a Trusted Runtime Securing Agents in Production Infrastructure, Now Generally Available

Teleport Beams, a Trusted Runtime Securing Agents in Production Infrastructure, Now Generally Available

Nov 10, 2026 By Teleport In Teleport
Unlike traditional sandboxes that focus on VM level isolation of agentic workloads and credential management, a trusted runtime gives agents delegated identity and controls access and behavior at the swarm level without leveraging secrets.
Read Post
Zenity

Your Voice AI Agent Takes Calls From Strangers. Who's Checking?

Nov 10, 2026 By Dan Levy In Zenity
Last week, US prosecutors indicted three people who allegedly used AI to impersonate both a CEO and a law-firm attorney on live calls to steal about $129 million from companies worldwide. Employees first heard a familiar executive’s voice, then an authoritative “attorney” telling them where to wire the money. Victims allegedly included hospital systems, a bank, a fintech, and a mutual fund company.
Read Post

Does GDPR Require LLM Data to Stay in the EU? Your 3 Options #ai #gdprcompliance

Nov 10, 2026 By Protecto In Protecto
Does GDPR require your LLM data to stay in the EU? No. GDPR doesn’t require personal data to stay in the EU, but it does require a valid transfer mechanism, such as an adequacy decision or standard contractual clauses. Many European enterprises keep data in the EU anyway, partly because of the Schrems II ruling and ongoing uncertainty around the EU-US Data Privacy Framework.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.