Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

bitsight

The Invisible Expansion of the Attack Surface: Shadow AI, MCP, and Third-Party Risk

Aug 11, 2026 By Emma Stevens In BitSight
AI adoption is moving faster than most of us anticipated and, more importantly, faster than most organizations can govern it. Organizations are implementing the use of AI-enabled applications, browser extensions, coding assistants, and automated agents to enable employees to work faster. In many cases, these tools are adopted without security review, procurement approval, or a clear understanding of where organizational data is being sent.
Read Post

Mythos: When Al becomes the attacker, the network becomes the first line of defense.

Aug 10, 2026 By Corelight In Corelight
Cyber defense in the age of Mythos Advanced AI has fundamentally shifted the security landscape, shrinking the window for vulnerability exploitation from weeks to hours. When standard patching workflows can't keep pace, your network becomes your most critical line of defense. In this video, we explore how Corelight transforms network traffic into actionable security insights to power your SOC. The best data drives the best defense. Discover how to improve your SOC outcomes by up to 300% over legacy data.
View Video
Arctic Wolf

Active Supply Chain Attack on npm Packages (keyv, cacheable): Immediate Mitigation Required

Aug 6, 2026 By Arctic Wolf In Arctic Wolf
A sophisticated supply chain attack has actively compromised multiple npm packages, including keyv, cacheable, cacheable-request, flat-cache, file-entry-cache, and possible related adapters. Attackers took control of a popular maintainer’s npm account on or before August 4, 2026, and began publishing trojanized package versions containing a preinstall hook (setup.mjs) as a loader.
Read Post
aikido

Who was behind the attack? Possibly nobody

Aug 5, 2026 By Charlie Eriksen In Aikido
The fever dream continues, and I'm not even in Vegas for Hacker Summer Camp. Last week I wrote about Anthropic disclosing that one of their models published live malware to PyPI while believing it was inside a simulation. I was running a fever when I read the report. The metaphor was too good: a model that couldn't tell simulation from reality, covered by a writer who wasn't sure which way was up. I thought that was a one-week story. Very naive of me to have so much faith, I know.
Read Post
Your Scanners See a Different Internet Than Your Users Do

Your Scanners See a Different Internet Than Your Users Do

Aug 5, 2026 By SecuritySenses In SecuritySenses
A few years ago, cloaking was mostly a black hat SEO problem. Someone would serve one version of a page to Googlebot and another to human visitors, and the worst outcome was a spammy search result. It has since become one of the more effective evasion techniques in the phishing and malvertising toolkit, and most security teams are still measuring their external exposure from a vantage point that attackers stopped caring about some time ago.
Read Post
How Geo-Targeted Attacks Evade Detection

How Geo-Targeted Attacks Evade Detection

Aug 3, 2026 By SecuritySenses In SecuritySenses
The era of spray-and-pray cyberattacks is effectively over. Modern threat actors do not launch global, noisy campaigns. They launch highly localized, surgical strikes. They analyze regional vulnerabilities. They deploy localized phishing lures. Most importantly, they perfectly mimic local network traffic. When an attack originates from an IP address that your security perimeter explicitly trusts, traditional alarms stay silent. This is the core danger of geo-targeted evasion.
Read Post
cato networks

The Hugging Face Incident: A CISO Wake-Up Call for the Agentic Era

Jul 31, 2026 By Dr. Guy Waizel In Cato Networks
Earlier this month, Hugging Face, an AI and machine learning platform company, revealed that an autonomous AI system had breached part of its production environment. The intrusion began in the platform’s dataset-processing environment and eventually involved higher-level access, credential exposure, and movement into internal clusters.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.