Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

OUT OF BAND | The Breaking Point: Inside Mythos' Zero-Day Machine with Anthropic's Nicholas Carlini

Apr 30, 2026 By Rubrik In Rubrik
Nicole Perlroth sits down with Nicholas Carlini for an Out of Band conversation on the imminent zero-day surge. Carlini explains what Mythos can already do: find and exploit flaws in some of the world’s most hardened, widely deployed software—with minimal human input. He details what Mythos has already hacked, which now includes most of the operating systems in use.
View Video
Snyk

"A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages

Apr 29, 2026 By Stephen Thoemmes In Snyk
On April 29, 2026, attackers published malicious versions of four npm packages in the SAP development ecosystem: mbt, @cap-js/db-service, @cap-js/sqlite, and @cap-js/postgres. Each compromised release ships a preinstall hook that downloads the Bun JavaScript runtime from GitHub Releases and uses it to execute an ~11.6 MB obfuscated credential stealer.
Read Post
Internxt

What Is the Best Free Antivirus Software to Protect Your Device?

Apr 28, 2026 By Nathan James Turner In Internxt
A lot of times, people only worry about the best antivirus software before it’s too late; they may have accidentally downloaded or opened a file containing malware, causing file corruption, data loss, or even encrypting their device. There are many free antivirus software options, and the best antivirus products out there also offer additional features to help further protect your device.
Read Post
jumpsec

Bugs & Betrayal - Vect Analysis

Apr 28, 2026 By Sean Moran In JUMPSEC
Vect is a newly observed RaaS operation that emerged in December of 2025, with affiliate recruitment and victim postings following shortly after in January 2026. Following the 19th of March 2026 Trivy/LiteLLM supply chain attack conducted by TeamPCP, in which ~340 GB uncompressed data was stolen, Vect announced on the dark web forum “Breached” that they would be partnering with TeamPCP.
Read Post
Do you want to stop your Mac's battery from draining? Here's what you need to do!

Do you want to stop your Mac's battery from draining? Here's what you need to do!

Apr 28, 2026 By SecuritySenses In SecuritySenses
Although MacBook batteries are meant to last for quite some time, the truth is that these batteries can be inherently difficult to manage sometimes. That's why the most important thing is to learn what drains the battery's power and how you can stop this issue to the best of your capabilities. Here's what you need to take into account.
Read Post

The Silent Data Problem in Hospitals

Apr 27, 2026 By Rubrik In Rubrik
We’ve all been there: a temporary file created for a claim gets saved and forgotten. Ten years later, that "temporary" file is a massive liability. Stephen Bader from Powers Health shares how they are tackling sensitive data sprawl. It’s not malicious; it’s just how work happens. But identifying and securing that PHI is a multi-year project every healthcare system needs to start today. Hear how Powers Health is cleaning up their data footprint with Josh Howell.
View Video
nakivo

How to Protect Backups from Ransomware with NAKIVO's Malware Scan

Apr 23, 2026 By NAKIVO Team In NAKIVO
Backups have become a primary target for ransomware. Hackers want to ensure that companies pay the ransom by not allowing them to recover their data independently. With NAKIVO Backup & Replication, you get several features (for example, immutable backup targets) to ensure that once created, a backup cannot be infected or corrupted with a new ransomware infection.
Read Post
knowbe4

Alert: WhatsApp Phishing Campaign Delivers Malware

Apr 21, 2026 By KnowBe4 Team In KnowBe4
A new phishing campaign is using WhatsApp messages to deliver malware, according to researchers at Microsoft. The attackers are attempting to trick users into installing malicious Visual Basic Script (VBS) files. “The campaign relies on a combination of social engineering and living-off-the-land techniques,” Microsoft says.
Read Post

The Three-Layer Strategy for Autonomous Agent Governance with Joe Hladik and Amit Malik

Apr 21, 2026 By Rubrik In Rubrik
The race for AI dominance has created a dangerous imbalance between business velocity and cyber resilience. In this episode, host Caleb Tolin is joined by ⁠Joe Hladik⁠, Head of ⁠Rubrik⁠ Zero Labs, and Staff Security Researcher ⁠Amit Malik⁠ to break down the findings of their latest report on agentic adoption. The discussion centers on the Agentic Paradox. This is the technical reality that tools designed to automate high-level tasks are inherently built to find the most efficient path around obstacles, including existing security policies.
View Video

Ep 39: This is your first ransomware attack, not ours

Apr 21, 2026 By Sumo Logic, Inc. In Sumo Logic
On this episode of Masters of Data, we sat down with Steven Manley, CTO of Druva, to get the unfiltered truth about ransomware: it's not a matter of if you'll be breached, but when, and bad actors are now launching hundreds of attacks at a surprisingly low cost. We dig into why attackers lurk undetected for 200-plus days, how AI is being weaponized for everything from eerily convincing voice phishing to secretly training your own AI systems against you, and why your most protected assets are rarely what gets hit first.
View Video
Mitigating Advanced Persistent Threats with Cyber Security

Mitigating Advanced Persistent Threats with Cyber Security

Apr 20, 2026 By SecuritySenses In SecuritySenses
The financial stakes of a modern cyberattack are higher than ever, threatening not just data, but the very survival of your company. According to IBM's Cost of a Data Breach 2024 report, the average cost of a data breach for companies has reached $4.9 million. This staggering figure factors in devastating operational downtime, lost business, and expensive post-breach responses. It is a harsh reality that forces IT leaders to rethink their entire approach to digital safety.
Read Post

Prioritized Recovery for Object Storage: Restore what matters most, first!

Apr 17, 2026 By Rubrik In Rubrik
When you need to recover an S3 bucket or Azure Blob container, you probably don't need all of it back at once. Your app config files, your latest data partitions, your active transaction logs — those need to be online now. Last year's holiday party photos — well, they can follow.
View Video

82% of Attacks Skip Malware Entirely

Apr 15, 2026 By CrowdStrike In CrowdStrike
27 seconds. That’s how fast an adversary can move to your critical systems. In this clip, you’ll learn: How adversaries blend in using everyday admin tools Why traditional, reactive security models fall behind What makes modern intrusions so hard to detect Watch the full video to see how teams are shifting to proactive hunting.
View Video
cyberint

Diving Into Quasar RAT: TTPs, IoCs and more

Apr 14, 2026 By Gemma Goldstein In Cyberint
Quasar, crafted in the C# programming language, is a publicly accessible and open-source Remote Access Trojan (RAT) designed for Microsoft Windows operating systems (OSs). This creation comes courtesy of the GitHub user MaxXor and resides as a publicly hosted repository on GitHub. While its utility extends to legitimate applications like enabling remote assistance from an organization’s helpdesk technician, Quasar is being exploited by APT actors for cybercrime and cyber espionage endeavors.
Read Post

Detecting Adversary Intent: Analyzing Behavioral Tells in Admin Logs with Allison Wikoff

Apr 14, 2026 By Rubrik In Rubrik
Adversaries are already logging into your network using your own admin credentials. In this episode, Caleb Tolin sits down with Allison Wikoff to move past the identity clichés and analyze the specific behavioral signals that separate routine IT maintenance from state-sponsored sabotage. They dissect why resilience is not a flash of genius during a crisis, but a mindset that organizations can adopt to stay ahead of dynamic threat actors.
View Video
Featured Post
Iranian Cyber Threats, Geopolitics and the New Cyber Reality

Iranian Cyber Threats, Geopolitics and the New Cyber Reality

Apr 13, 2026 By Robert Hannigan, Chairman of International Business In BlueVoyant
In recent weeks, the Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), and the National Cyber Security Centre (NCSC) have all issued warnings about the growing risk of cyber activity attributed to Iranian-aligned actors. Their message is clear: the geopolitical situation is volatile, and organisations should assume they may be in scope for retaliation. The agencies all highlight similar weaknesses being repeatedly exploited: unpatched vulnerabilities, weak identity controls, and exposed remoteaccess services.
Read Post

DarkSword: Identify the Threat. Prevent the Attack. Complete Visibility.

Apr 12, 2026 By Lookout In Lookout
In moments. No warning. No trace. Total takeover. In March 2026, a new breed of mobile threat emerged: DarkSword. This sophisticated iOS exploit chain doesn’t need a phishing link or a malicious app download. Just one visit to a compromised website is enough to expose your entire enterprise. In this video, we dissect the DarkSword attack path—from the initial Safari iframe encounter to the kernel-level takeover—and show you how the threat disappears before most security teams even know it’s there.
View Video

What Is a Computer Virus? How It Spreads & How to Stop It | Avast

Apr 9, 2026 By Avast In Avast
You use your computer every day to work, shop, stream, and connect with the people and things you care about. But what exactly is a computer virus, and how does it manage to spread so fast? In this video, we explain what a computer virus is, how it attaches to files and programs you trust, and how it activates, copies itself, and spreads to other files and devices—just like a biological virus.
View Video

Rubrik SAGE: Semantic Agent Control That Scales for the Enterprise

Apr 6, 2026 By Rubrik In Rubrik
Are you ready to take control of your AI agents with Rubrik Agent Cloud? Traditional keyword filters aren't enough when agents are acting autonomously. You need a true AI governance engine to manage them effectively! SAGE is our semantic AI governance engine that allows you to define custom policies using natural language and block risky tools in real time. Ready to secure your autonomous agents? Dive into SAGE and learn more by checking out our website.
View Video
acronis

Best antivirus for Windows 11: Guide to choosing the right software

Apr 3, 2026 By Acronis In Acronis
Windows 11 is better protected out of the box than older versions of Windows, but that does not solve the biggest problem most users face: recovery. If a phishing page slips through, ransomware starts encrypting files, or your SSD fails during an update, built-in protection can only take you so far. That is why the best antivirus for Windows 11 is no longer just the one that blocks malware most aggressively. It is the one that fits how you actually use your PC and what happens if something goes wrong.
Read Post

Enforcing GitHub Repository Backups with Rubrik and GitHub Actions

Apr 2, 2026 By Rubrik In Rubrik
Your CI pipeline enforces tests, security scans, and policy checks before code hits production. But your backups? Still running on a schedule, completely disconnected from your deployments. In this video, I'll walk you through how to use Rubrik's powerful APIs to build what I'm calling "Backup as Code": a GitHub Action that triggers an on-demand Rubrik snapshot of your GitHub repository every time code is merged into the main branch. We'll look at the action code, wire it up to a live repo, and watch the whole thing run end to end.
View Video
CrowdStrike

STARDUST CHOLLIMA Likely Compromises Axios npm Package

Apr 1, 2026 By Counter Adversary Operations In CrowdStrike
On March 31, 2026, a threat actor used stolen maintainer credentials to compromise the widely used HTTP client library Axios Node Package Manager (npm) package and deploy platform-specific ZshBucket variants. CrowdStrike Counter Adversary Operations attributes this activity to STARDUST CHOLLIMA with moderate confidence based on the adversary’s deployment of updated variants of ZshBucket (malware uniquely attributed to STARDUST CHOLLIMA) and overlaps with known STARDUST CHOLLIMA infrastructure.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.