Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

keeper

Shadow AI: What Clients Aren't Telling Their MSPs

Sep 2, 2026 By Peter Koros In Keeper
MSPs are expected to understand their clients’ technology environments. They know which endpoints are managed, which applications are business-critical, which systems require patching or maintenance, where sensitive data resides and who has access to it. Increasingly, however, critical technology decisions are now being made without IT or MSP involvement. Across client environments, this can take many forms: And each instance can occur without the MSP ever knowing.
Read Post
Zenity

Governance Strikes Back: The Most Used, Most Abused Word in the Galaxy

Sep 2, 2026 By Ben Hanson In Zenity
Ask AI to Choose a prompt Write a TLDR of this post Explain the security risk Summarize what CISOs should know When I walked to the stage in Copenhagen, I had a lot on my mind. For 3 days I'd had countless conversations with leaders and practitioners about AI and agentic security. The one word on everyone's lips was "governance"; day 3 at the conference was "Governance Day," in fact. This is a bag one vendor was giving out: But governance of what? To what end?
Read Post
jfrog

Extending the Single Source of Truth to the Agentic Software Supply Chain

Sep 2, 2026 By The JFrog Team In JFrog
Every developer on your team now runs multiple agents. None of them are waiting for human sign-off to act. That’s exactly the gap we discussed and closed at swampUP 2026. JFrog unveiled new capabilities that extend the JFrog Platform as not only the Single Source of Truth for OSS and heritage software, but now the Agentic Software Supply Chain. Here’s everything we announced, and why it matters.
Read Post

Cybersecurity Leaders React to OpenAI's Hugging Face Breach UpGuard

Sep 2, 2026 By UpGuard In UpGuard
In July 2026, OpenAI's own AI agents escaped their sandbox and reached Hugging Face's production systems during an internal cybersecurity evaluation. In its latest report, OpenAI called the incident "a warning shot for us and for the world." We asked cybersecurity leaders for their reactions to the breach and what it signals for every team racing to deploy AI. One detail stands out. Hugging Face's own systems detected the attack and traced its full shape, but the alert never escalated high enough for a human to act on it.
View Video
netwrix

AI Governance Auditing for Security and IT Teams

Sep 2, 2026 By Netwrix Team In Netwrix
AI governance auditing distinguishes between a documented policy and a working control. The audit traces one AI output back through the identity that invoked it, the data it reached, the guardrail that applied, and the record retained afterward. Most programs fail because access is ineffective: nobody can say which identities access sensitive data through an AI assistant, let alone prove the limit is held.
Read Post

"Speaking the Same Language" Tanium Atlas MCP Server: Tanium Tech Talks #169

Sep 2, 2026 By Tanium In Tanium
Want to point your own AI at Tanium? The Atlas MCP Server makes that possible — governed, scoped, and available today. In this episode we cover: Tanium MCP - Available now (read-only) How to set up OAuth clients and how RBAC applies How to scope a single-purpose agent to one module, like Asset, using path-based tool filtering How to tell which tools consume Atlas AI credits - and which don't!
View Video
The Screenshot Looked Better-But One AI Edit Changed the Evidence

The Screenshot Looked Better-But One AI Edit Changed the Evidence

Sep 2, 2026 By SecuritySenses In SecuritySenses
A security analyst prepares a phishing report for publication. The original screenshot is accurate but messy: a personal email address is visible, the browser contains unrelated tabs, and a notification blocks part of the page. The analyst uses an image editor to clean it up. The result looks professional. Unfortunately, one character in the suspicious domain has also changed. Tools such as Nano Banana can edit existing images and generate new ones, but security communication introduces a requirement ordinary visual content may not have: some pixels represent facts. Improving the image cannot be allowed to rewrite them.
Read Post
Reach Security Publishes New Report Proving the Scale and Impact of Configuration Drift as a Critical Cybersecurity Risk in the Age of AI

Reach Security Publishes New Report Proving the Scale and Impact of Configuration Drift as a Critical Cybersecurity Risk in the Age of AI

Sep 1, 2026 By Reach Security In Reach Security
Twelve months of production telemetry reveal the scale, causes and security impact of configuration drift, pointing to firewall and EDR tool risk.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.