Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Featured Post
Data centres and the changing hybrid threat

Data centres and the changing hybrid threat

Sep 17, 2026 By Katie Barnett, Director of Cyber Security and Gavin Wilson, Director of Physical Security and Risk In SecuritySenses
The UK is in the middle of a data centre building boom. Government forecasts put AI capable capacity needs at 6GW by 2030, three times what exists today, while electricity demand from the sector is also expected to rise significantly.
Read Post
seemplicity

Close the Discovery Gaps in Your CTEM Program with Seemplicity

Sep 16, 2026 By Kevin Swan In Seemplicity
CTEM Discovery is about more than finding assets. It’s about understanding what exists, what’s actually being scanned, and how data from different tools connects. Seemplicity correlates security, inventory, identity, and ownership data across sources to create a unified view of each asset, expose coverage gaps, and give security teams the context they need to prioritize, validate, and remediate exposures effectively.
Read Post

Research - From Square Root to /root: Escalating Privileges in Azure Containers with Python in Excel

Sep 16, 2026 By SafeBreach In SafeBreach
Isolation is not the same thing as security. Ron Ben Yizhak from SafeBreach Labs presented this research at Black Hat USA and DEF CON: when Microsoft shipped Python in Excel, the code didn't run on a machine. It ran in an isolated container in Azure. So he asked the obvious question. How isolated is it, really? An isolated environment still has an attack surface. It just moves. See how Ron: If your teams are evaluating cloud-executed code features, this one is worth the full read—the methodology matters as much as the findings.
View Video

Demo - Agent Action Control

Sep 16, 2026 By Netskope In Netskope
Netskope Skylight Agent Action Control is an inline security capability within the Netskope Skylight AI Security suite designed to evaluate, govern, and enforce real-time controls over the actions performed by autonomous AI agents. Rather than simply blocking or allowing an entire AI application or coding assistant, it intercepts attempted agent operations—such as code pushes, database modifications, or API calls—before they execute.
View Video
cloudflare

When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts

Sep 16, 2026 By AI In Cloudflare
A modern storefront can look perfectly healthy while malicious JavaScript works underneath: siphoning affiliate revenue, hijacking searches and clicks, tampering with analytics, or asking a remote server what to execute next. Pages load, products appear, and checkout works — yet the browser may be quietly doing something the site owner never authorized. That is the blind spot our Client-Side Security machine learning (ML) model is built to expose.
Read Post
keep

Why do I need a cloud risk assessment?

Sep 11, 2026 By Keep Information Security Services In KEEP
Your business almost certainly runs on cloud services. From document storage, email and finance software to your customer data and internal systems, the chances are that most of what keeps your business operational lives, at least in part, in the cloud. And yet, for many businesses, the question of whether that cloud environment is secure rarely gets asked. It tends to be presumed. After all, you’ve got bigger things to worry about. You’re with a reputable provider.
Read Post
cloudflare

Introducing automatic remediation policies with Cloudflare CASB

Sep 11, 2026 By CASB In Cloudflare
Today, we’re making Cloudflare CASB more powerful than ever by introducing automatic remediation policies. This means security teams can now design event-driven logic to revoke risky file shares and dispatch custom webhooks, without manual intervention. When we launched Cloudflare CASB, a cloud access security broker, we wanted to provide security teams complete visibility into the posture of their SaaS applications before misconfigurations became incidents.
Read Post

Escalated Privileges in Azure Containers with Python in Excel

Sep 11, 2026 By SafeBreach In SafeBreach
A math function in Excel became a path to root in Microsoft's cloud. SafeBreach Labs researcher Ron Ben Yizhak reverse-engineered the isolated Azure containers behind Microsoft's Python in Excel feature—and found the "isolated" part didn't fully hold. Cloud isolation claims are a trust boundary. Trust boundaries get tested. What he found: Both issues were responsibly disclosed to Microsoft and patched between March and June 2026, and the research debuted at DEF CON 34.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.