Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Snyk

Autonomous Attacks Are Already Here. The Defense Has to Match Their Speed.

Oct 7, 2026 By Snyk Team In Snyk
Last week, Snyk CTO Manoj Nair sat down with Alon Krifcher, Head of Applied AI from Anthropic, for a live discussion on the coming wave of autonomous attacks. Manoj kept landing on one thing: the AI Hurricane has already arrived, and what's left is deciding whether your defense runs at the same speed as the threat.
Read Post
Continuous Attacker Emulation: Testing Controls Between Annual Assessments

Continuous Attacker Emulation: Testing Controls Between Annual Assessments

Oct 7, 2026 By SecuritySenses In SecuritySenses
Security controls are built to stop attackers, but most organizations only find out whether those controls actually work once a year, during a scheduled assessment. In the months between those engagements, configurations change, new tools get deployed, and remediation work from the last test either holds up or quietly fails without anyone noticing. Continuous attacker emulation exists to close that gap, giving security teams an ongoing read on their actual exposure rather than a single snapshot frozen in time.
Read Post

Frontier AI Impact Series, Part 1: Why Attackers Stopped Waiting for Zero-Days | Bitsight

Oct 6, 2026 By Bitsight In BitSight
Frontier AI can shrink weeks of vulnerability research into exploitation in hours. What does that mean for the flaws your team deprioritized years ago? Bitsight’s Emma Stevens, Senior Threat Intelligence Advisor, breaks it down in the first video of our new series.
View Video
CrowdStrike

Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers

Oct 6, 2026 By Donato Onofri - Paul Urian In CrowdStrike
Modern frontier AI models deploy safety classifiers. These are second AI models that sit between the user and the frontier model, evaluating every request in real time. If a request is flagged as harmful, the classifier blocks it before the model can respond. Significant investment and safety model expertise have made these classifiers effective. Anticipating how adversaries circumvent these systems is a security problem that requires different expertise.
Read Post
knowbe4

[Cybersecurity Awareness Month] Cyber Espionage: When the Attacker's Best Asset Is You

Oct 5, 2026 By Erich Kron In KnowBe4
Spies have always relied on technology, disguises, secret communications and clever gadgets, at least if the movies are to be believed. But some of the most effective tools in the espionage business have always been people. Convince the right person to open a door, reveal a secret or trust someone they should not, and suddenly bypassing the sophisticated security system becomes unnecessary.
Read Post
knowbe4

Threat Actors Abuse Trusted Accounts and Internal Tools to Launch Convincing BEC Attacks

Oct 5, 2026 By KnowBe4 Team In KnowBe4
Attackers are continually finding new ways to refine business email compromise (BEC) attacks, according to Douglas McKee, Director of Vulnerability Intelligence at Rapid7. When attackers compromise trusted tools and accounts, they can manipulate victims’ view of reality. One way attackers can achieve this is through what McKee calls “calendar warfare,” in which attackers use calendar meetings to trick users into falling for attacks.
Read Post

The cyberattack your security team has no framework for

Oct 5, 2026 By ManageEngine In ManageEngine
At the opening bell, your stock drops fifteen percent due to a data breach that never actually happened. Fake screenshots, a fake CEO statement, no actual hack. Your security team looks into it, but finds nothing because there's nothing to find. And the damage is already done. Gartner is calling disinformation attacks like this a top threat, and most companies aren’t prepared to handle it. For more insightful videos, visit ManageEngine Insights.
View Video

Supply Chain Attacks in the SaaS Era: Unpacking the Drift Breach | Cloudflare x The CISO Signal

Oct 4, 2026 By Cloudflare In Cloudflare
It was just a little chat window in the corner of the screen. But behind it was a web of trusted connections reaching deep inside the enterprise. Here’s how attackers turned a trusted integration into a massive supply chain breach. Expand for more details and resources In August 2025, attackers tracked as UNC6395 compromised OAuth tokens associated with Salesloft’s Drift integration. This turned trusted connections to Salesforce environments into an attack path reaching hundreds of companies, including top-tier cybersecurity organizations.
View Video
datadog

The first 72 hours of a ransomware attack: Why restored isn't recovered

Oct 2, 2026 By Datadog In Datadog
You start the day with reports that your employees cannot access critical systems. A ransom note soon explains why: attackers have encrypted them and demand $2 million in bitcoin for a decryption key. Your team contains the attack and confirms that the backups are safe, yet this is only the beginning. Restoring your servers can take weeks, but recovering the business can take much longer.
Read Post
astra

Zero-Day Attack Prevention: Catching Unknown Vulnerabilities Before Threat Actors Do

Oct 1, 2026 By Keshav Malik In Astra
On September 1, 2026, OpenAI announced that its Astra model had reached the Critical tier for cyber capability under the company’s Preparedness Framework, a first for its systems. While working through an internal benchmark of 20 recently disclosed vulnerabilities in Google’s V8 engine, the model found two zero-days that no one had asked it to look for and used them in a working exploit chain. OpenAI is disclosing both flaws and restricting the capability to vetted testers.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.