Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

netwrix

What is DLL hijacking, and why your new AI plugin might be the easiest way in

Aug 26, 2026 By Dirk Schrader In Netwrix
DLL hijacking is a decades-old Windows vulnerability class (Mitre Att@ck T1574) getting new life from AI plugins bolted onto legacy desktop apps. Attackers plant a malicious DLL where a vulnerable app will load it instead of the real one, inheriting that app's privileges. To detect it, watch for DLLs loaded by name from writable folders. To prevent it, you have to fix the app's load-order logic or blocking untrusted DLLs at the endpoint.
Read Post
The Competitive Edge of AI Procurement Solutions for Modern Enterprises

The Competitive Edge of AI Procurement Solutions for Modern Enterprises

Aug 26, 2026 By SecuritySenses In SecuritySenses
Modern enterprises operate in an environment where efficiency, cost control, and agility can directly influence business growth. Procurement, once viewed primarily as an administrative function, has become an important strategic area for organizations looking to improve financial performance and build stronger supplier relationships. As procurement processes become more complex, businesses are increasingly turning to AI Procurement Solutions to simplify operations and make better purchasing decisions.
Read Post
1Password

What makes a good AI coworker? With OpenAI's Codex product lead

Aug 25, 2026 By Chris Fowler In 1Password
Zero-Shot Learning is a podcast about how AI is built, secured, and deployed. Hosted by Nancy Wang, 1Password CTO, and Dev Tagare, Senior Director of Engineering at Google Gemini, it offers a builder’s view of the architecture and complex decisions involved in shipping AI.
Read Post
gitguardian

Agentic AI Security: Credentials and Permissions Define the Blast Radius

Aug 25, 2026 By Katie DeMatteis In GitGuardian
In July 2026, researchers at Noma Labs coaxed GitHub's new Agentic Workflows into leaking data from a private repository. It wasn’t from malware. They created a plausible-looking issue in a public repository containing instructions for the agent to retrieve information from other repositories in the organization. After testing variations of the prompt, they found that adding one word, "Additionally," was enough to get past GitHub's guardrails.
Read Post

Code is the easy part with Rohan Varma from OpenAI | Zero-Shot Learning

Aug 25, 2026 By 1Password In 1Password
As a product leader who went from working on Cursor to OpenAI’s Codex, Rohan Varma got a personal preview of a shift most developers are just beginning to catch up to. His conversation with 1Password CTO Nancy Wang upends the idea that AI helps developers write code faster, reimagines code reviews, and explores how developer skills expand once agents take over implementation. In this episode: Zero-Shot Learning is a builder-to-builder podcast about how AI systems are designed, deployed, and secured. Subscribe for more.
View Video
kovrr

State AI Laws Change Faster Than Compliance Programs

Aug 25, 2026 By Kovrr In Kovrr
Colorado passed the first comprehensive state AI law in May 2024, and organizations spent the following year building impact assessment processes against it. Those obligations never took effect. The statute was delayed twice, blocked by a federal court, then repealed and replaced by a narrower framework before its own effective date arrived. ‍ Anyone who built a compliance program to that specific statute prepared for a regime that never existed.
Read Post
teramind

10 Shadow AI Detection Tools for Enterprise Data Security

Aug 25, 2026 By Teramind In Teramind
As artificial intelligence becomes deeply woven into daily workflows, employees are adopting unapproved AI apps at an unprecedented pace. According to Teramind’s Shadow AI Behavior Report, a staggering 89% of workplace AI usage occurs outside enterprise-governed channels, leaving 86% of organizations blind as to how corporate data flows in and out of these tools.
Read Post
bitsight

New Bitsight Research Shows AI Abuse Is Moving Beyond the Jailbreak Prompt

Aug 25, 2026 By Emma Stevens In BitSight
Jailbreak prompts (i.e. prompts designed to remove or bypass the guardrails and rules that govern AI systems, like LLMs) prompts have been circulating for years. At first, a lot of it was pretty simple: copy a prompt, tell the model to ignore its rules, and see what happens. It was also largely noisy, unverified, and often didn’t work. But the noise was still telling us something. Threat actors were beginning to study AI systems the same way defenders were, and over time, the goal started to change.
Read Post
jfrog

Coding Agents Just Reopened Your Software Supply Chain Blind Spot

Aug 25, 2026 By Yonatan Philip In JFrog
Most organizations spent years hardening their software supply chain. The model is familiar: dependencies flow through a controlled repository, policies determine what is allowed, scanning catches what slips through, and every action is logged for auditability. It works because human developers operate within environments that enforce these rules. AI coding agents break that assumption entirely.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.