Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

apono

TruffleNet Weaponizes Stolen Credentials to Target AWS

Nov 5, 2025 By Gabriel Avner In Apono
New details are emerging about a wave of intrusions into Amazon Web Services environments. Attackers are reportedly weaponizing AWS IAM, using it to validate stolen credentials and turn identity controls into a springboard for in-cloud abuse. According to new research from Fortinent, attackers are leveraging the open source TruffleHog tool to automate testing of stolen AWS credentials in what they are calling the TruffleNet infrastructure.
Read Post
manageengine

Mastering cloud app control, Part 1: Locking down access

Nov 3, 2025 By Hari Kumar Selvanarayanan In ManageEngine
When it comes to managing cloud application usage in an organization, the challenges are anything but simple. On one side, users are constantly exposed to malicious links and risky apps. On the other, locking things down too tightly by broadly blocking access to services can cripple employee productivity. Ideally, you'd want a balance between security and productivity.
Read Post
opti9

6 Months After re:Inforce: Which AWS Security Updates Actually Matter for SMBs

Nov 3, 2025 By Mark Mazza In Opti9
AWS re:Inforce 2025 delivered a flood of security announcements back in June. Simplified AWS WAF consoles. New Shield network posture management. Integrated CloudFront security. The headlines promised that enterprise-grade security finally became accessible to mid-market companies. Six months later, the hype cycle is over.
Read Post
fidelis security

Understanding the Role of Misconfigurations in Data Breaches in Cloud Environments

Nov 3, 2025 By Fidelis Security In Fidelis Security
Key Takeaways Cloud misconfiguration is the silent epidemic destroying enterprise security. While organizations accelerate cloud adoption across cloud environments, Gartner analysis shows that through 2025, 99% of cloud security failures have been the customer’s fault, primarily due to misconfigurations. For decision-makers, this represents a critical business risk that demands immediate strategic attention.
Read Post

Cloudflare Radar: New TLD Insights and Certificate Transparency

Nov 1, 2025 By Cloudflare In Cloudflare
André, who joined Cloudflare as an intern in Lisbon, Portugal, in 2024, explains how radar.cloudflare.com showcases trends in Internet traffic, protocol adoption, and security. He walks us through Radar’s new Top-Level Domain (TLD) insights, how the team uses DNS magnitude to measure domain popularity, and why certificate transparency is crucial for a safer web. The conversation also goes into outage monitoring, the Data Explorer and URL scanner tools, and how users around the world are finding surprising Internet trends — like the rise of Linux usage in France.
View Video
cloudflare

Beyond IP lists: a registry format for bots and agents

Oct 30, 2025 By Thibault Meunier In Cloudflare
As bots and agents start cryptographically signing their requests, there is a growing need for website operators to learn public keys as they are setting up their service. I might be able to find the public key material for well-known fetchers and crawlers, but what about the next 1,000 or next 1,000,000? And how do I find their public key material in order to verify that they are who they say they are? This problem is called discovery.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.