Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

knowbe4

New Phishing Kit Uses AI to Fully Automate Vishing Attacks

Sep 2, 2026 By KnowBe4 Team In KnowBe4
A new phishing kit is using generative AI to fully automate voice phishing (vishing) attacks, according to researchers at Group-IB. The phishing platform, called “Balonx,” includes a module dubbed “CallFlow” that the researchers say “represents a fundamental evolution” in the phishing-as-a-service market.
Read Post
keeper

Shadow AI: What Clients Aren't Telling Their MSPs

Sep 2, 2026 By Peter Koros In Keeper
MSPs are expected to understand their clients’ technology environments. They know which endpoints are managed, which applications are business-critical, which systems require patching or maintenance, where sensitive data resides and who has access to it. Increasingly, however, critical technology decisions are now being made without IT or MSP involvement. Across client environments, this can take many forms: And each instance can occur without the MSP ever knowing.
Read Post
The Screenshot Looked Better-But One AI Edit Changed the Evidence

The Screenshot Looked Better-But One AI Edit Changed the Evidence

Sep 2, 2026 By SecuritySenses In SecuritySenses
A security analyst prepares a phishing report for publication. The original screenshot is accurate but messy: a personal email address is visible, the browser contains unrelated tabs, and a notification blocks part of the page. The analyst uses an image editor to clean it up. The result looks professional. Unfortunately, one character in the suspicious domain has also changed. Tools such as Nano Banana can edit existing images and generate new ones, but security communication introduces a requirement ordinary visual content may not have: some pixels represent facts. Improving the image cannot be allowed to rewrite them.
Read Post
Reach Security Publishes New Report Proving the Scale and Impact of Configuration Drift as a Critical Cybersecurity Risk in the Age of AI

Reach Security Publishes New Report Proving the Scale and Impact of Configuration Drift as a Critical Cybersecurity Risk in the Age of AI

Sep 1, 2026 By Reach Security In Reach Security
Twelve months of production telemetry reveal the scale, causes and security impact of configuration drift, pointing to firewall and EDR tool risk.
Read Post
kovrr

Three Frameworks, Three Definitions of AI Risk

Sep 1, 2026 By Kovrr In Kovrr
Cross-mapping tables for AI evidence in life sciences already exist and are broadly right. Data integrity practice lines up against data governance requirements, software lifecycle logs against technical documentation and logging, human review checks against human oversight duties, post-market surveillance against post-market monitoring. Build one repository, present it two ways. ‍ All of that is sound and it starts one step too late.
Read Post
elastic

Defending against AI-fueled social engineering

Sep 1, 2026 By Joe DeFever In Elastic
Social engineering has always been the softest edge of enterprise defense, and AI is sharpening adversaries’ attacks. Phishing, business email compromise, and impersonation still dominate the initial-access playbook, but AI has stripped out the cost, time, and skill barriers that once forced attackers to choose between reach and precision.
Read Post
vanta

DIFC Regulation 10: AI system certification requirements orgs need to know

Sep 1, 2026 By Vanta In Vanta
Accelerating security solutions for small businesses‍ Tagore offers strategic services to small businesses. A partnership that can scale‍ Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate. Standing out from competitors‍ Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.
Read Post
CrowdStrike

CrowdStrike Falcon Guardian Defines the Next Generation of AI Security

Sep 1, 2026 By Michael Devins In CrowdStrike
AI has rapidly evolved into a technology that takes action. AI agents can reason, access enterprise systems, and execute tasks autonomously at machine speed, often with the full permissions of the users they serve. As these agents proliferate across the enterprise, organizations need to understand where they operate, what they do, what they can access, and how to stop threats before they become breaches. This shift demands a new approach to AI security.
Read Post
protecto

Secure Data Sharing: Best Practices for Privacy and Compliance

Sep 1, 2026 By Mariyam Jameela In Protecto
Data sharing creates business value only when organizations can control where data goes, who can use it, and what happens after it leaves its original system. That becomes harder as businesses exchange customer records, financial information, healthcare data, and AI-ready datasets across employees, vendors, applications, and regions. The answer is not simply sending files through an encrypted channel.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.