Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Zenity

You Can't Secure the Homegrown AI Agents You Don't Know You Have

Nov 9, 2026 By Dan Levy In Zenity
Ask a security team how many homegrown AI agents the organization runs, and the room usually goes quiet. Engineering teams are building agents on AWS Bedrock, Azure AI Foundry, Google Vertex AI, and open-source frameworks faster than security can catalog them. Many of those agents read sensitive data, call tools and APIs, and act autonomously with little oversight.
Read Post
1Password

Scaling security reviews at 1Password: Adding an agentic pipeline stage (safely)

Nov 9, 2026 By Megan Barker In 1Password
In our first blog post, we introduced SAGE, our AI-assisted security code reviewer. In our second post, SuperSAGE (SAGE v2) gained context through scaffolding and consistency via the Go harness, so it could reason about the code around the diffs it reviews. The result? SAGE understands the 1Password codebase.
Read Post

How does Aurora Adaptive Threat Protection stop advanced cyber threats?

Nov 9, 2026 By Arctic Wolf Networks In Arctic Wolf
Aurora Adaptive Threat Protection in Action: Stopping Ransomware Before the Damage Is Done What happens when a user clicks a malicious file that bypasses traditional defenses? In this demo, you'll see how Arctic Wolf Aurora Adaptive Threat Protection uses AI-powered, intent-based detection to identify and disrupt ransomware activity in real time, stopping attacks before encryption can spread across the environment.
View Video
kovrr

AI Vendor Questions, and How to Check the Answers

Nov 9, 2026 By Kovrr In Kovrr
Most security teams now run an AI-specific questionnaire alongside the standard one, often forty to sixty questions long, and the lists have converged. Training on customer data, retention, subprocessors, model provenance, human oversight, logging, incident response. ‍ Having the list is no longer the hard part. Every answer arrives as a sentence from the vendor, and a sentence is not evidence. ‍
Read Post
kovrr

How to Evaluate a Shadow AI Detection Tool in a Trial

Nov 9, 2026 By Kovrr In Kovrr
A shadow AI detection trial produces a number within days. The tool reports how many AI applications it discovered, and the number is usually larger than anyone expected, which feels like proof that it works. ‍ It is not. Every tool in this category reports what it found. None of them reports what it missed, and the thing a buyer needs to know is the size of the second number. ‍
Read Post
9 Best AI SRE Agents for Production Environments

9 Best AI SRE Agents for Production Environments

Nov 9, 2026 By SecuritySenses In SecuritySenses
Production incidents rarely arrive as neatly defined engineering tasks. A latency alert might originate from a recent deployment, a database connection problem, or an infrastructure configuration that changed several hours earlier. Engineers must reconstruct what happened while the system is already affecting customers.
Read Post
What AI Integration Means for Energy Commodity Security

What AI Integration Means for Energy Commodity Security

Nov 9, 2026 By SecuritySenses In SecuritySenses
Artificial intelligence is changing how energy commodities are forecast, scheduled and traded. Models can process weather feeds, grid conditions and market prices faster than human teams, but faster decisions also create new security dependencies. A compromised data source or unauthorized model change can influence thousands of automated actions before an operator recognizes the pattern.
Read Post
7 Best End-to-End Agentic Software Development Platforms for Enterprises

7 Best End-to-End Agentic Software Development Platforms for Enterprises

Nov 9, 2026 By SecuritySenses In SecuritySenses
A developer assigns a bug to an AI coding agent. Twenty minutes later, the agent has investigated the repository, written a fix, generated tests, and opened a pull request. The code looks reasonable. But the change affects a payment service, the reviewer is unfamiliar with its dependencies, and nobody has checked whether the deployment requires additional approval.
Read Post
kovrr

Apple's 10-K Describes Agent Risk Without a Number

Nov 8, 2026 By Kovrr In Kovrr
Apple filed its annual report for the fiscal year ended September 26, 2026. Inside the risk factors sits a paragraph on AI agents that reads less like legal boilerplate and more like a threat model written by somebody who has watched one go wrong. ‍ It describes how an agent fails in operational detail. It attaches no figure to any of it. ‍
Read Post
reach security

PHP2Shell: Understand Reachability and Identify Attack Paths You Can Close Before You Patch

Nov 8, 2026 By Garrett Hamilton In Reach Security
Two PHP servers can carry the same critical CVE and require different immediate work. In an illustrative pair, one accepts requests from an untrusted network through a rule with no effective intrusion prevention. The other is denied on the assessed path. The first needs an immediate mitigation decision. The second needs that restriction preserved while software remediation continues.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.