Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

cycognito

Emerging Threat: (CVE-2026-70756) Oracle WebLogic Server Takeover via T3 and IIOP

Sep 16, 2026 By Igal Zeifman In CyCognito
CVE-2026-70756 is a vulnerability in the Core component of Oracle WebLogic Server, part of Oracle Fusion Middleware. An unauthenticated attacker with network access over the T3 or IIOP protocols can compromise the server and take full control of it. The vulnerability carries a CVSS v3.1 base score of 9.8 (Critical). Oracle rates it as easily exploitable, with no privileges and no user interaction required. Confidentiality, integrity, and availability impacts are all rated high.
Read Post
elastic

CISA's Logging Reference Architecture for OMB M-26-14: What federal agencies should do next

Sep 16, 2026 By Woody Walton In Elastic
On August 20, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) published its Logging Reference Architecture (LRA), the implementation guidance federal civilian executive branch (FCEB) agencies have been waiting for since the Office of Management and Budget's Memorandum M-26-14 reset the requirements for enterprise logging.
Read Post
knowbe4

Alert: AI is Accelerating Targeted Social Engineering Attacks

Sep 16, 2026 By KnowBe4 Team In KnowBe4
AI tools are drastically improving the speed of the reconnaissance stage of targeted social engineering attacks, according to researchers at ESET. Attackers can use these tools to trawl the internet for publicly available information about potential victims, and incorporate this information into personalized spear phishing attacks.
Read Post

Research - From Square Root to /root: Escalating Privileges in Azure Containers with Python in Excel

Sep 16, 2026 By SafeBreach In SafeBreach
Isolation is not the same thing as security. Ron Ben Yizhak from SafeBreach Labs presented this research at Black Hat USA and DEF CON: when Microsoft shipped Python in Excel, the code didn't run on a machine. It ran in an isolated container in Azure. So he asked the obvious question. How isolated is it, really? An isolated environment still has an attack surface. It just moves. See how Ron: If your teams are evaluating cloud-executed code features, this one is worth the full read—the methodology matters as much as the findings.
View Video

Tanium Scan Engine 7.0, "Better, Faster, Stronger": Tanium Tech Talks #170

Sep 16, 2026 By Tanium In Tanium
Vulnerability and compliance scans just got faster with Tanium's new scan engine. Today we're digging into Tanium Scan Engine 7.0, a rebuild of Comply scanning that moves enumeration onto Tanium Index instead of scanning live every time. The result: faster scans, lower resource usage, and one less dependency to worry about (goodbye, JRE!!).
View Video
bitsight

From CVE Disclosure to Internet-Wide Exposure: How Bitsight Uses AI to Accelerate Product Fingerprinting

Sep 16, 2026 By Greg Keshian In BitSight
When a new CVE drops, getting notified is the easy part. The real challenge comes right after. Depending on how your organization is set up, different teams have to scramble to figure out if you're actually using the affected product, which specific versions are exposed, whether it's lurking anywhere in your subsidiaries or vendor ecosystem, and how urgently you need to patch it.
Read Post
Corelight

Cryptography is negotiated, not configured: Why PQC readiness needs network data

Sep 16, 2026 By Vince Stoffer, Field CTO In Corelight
Post-quantum cryptography (PQC), and the many ways it intersects with IT and cybersecurity, is becoming increasingly important to organizations of every size. While it seemed like an esoteric concept a few years ago, relegated to cryptographers' conference talks, it’s now something that comes up in many of our customer conversations.
Read Post
Corelight

Corelight Sensor v29.2: Visibility into multi-stage intrusions, Shadow AI governance, and self-managing sensors

Sep 16, 2026 By Cynthia Gonzalez In Corelight
With Corelight Sensor v29.2, generally available September 16, 2026, your team gains the ability to behaviorally detect and disrupt multi-stage intrusions, govern AI usage across your network without decryption, and deploy sensors in minutes instead of hours. This post covers what’s new and how it accelerates your security operations.
Read Post
seemplicity

Close the Discovery Gaps in Your CTEM Program with Seemplicity

Sep 16, 2026 By Kevin Swan In Seemplicity
CTEM Discovery is about more than finding assets. It’s about understanding what exists, what’s actually being scanned, and how data from different tools connects. Seemplicity correlates security, inventory, identity, and ownership data across sources to create a unified view of each asset, expose coverage gaps, and give security teams the context they need to prioritize, validate, and remediate exposures effectively.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.