Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

certkit

Public mTLS client-auth certificates stop renewing in October

Jul 27, 2026 By Todd H. Gardner In CertKit
Chrome’s root program decides what certificates will be trusted by Chrome, and what they are allowed to do. Recently, Google decided that client authentication isn’t on the list. Under Chrome Root Program Policy v1.8, every certificate issued on or after March 15, 2027 can assert only one Extended Key Usage (EKU): server authentication. Let’s Encrypt moved early.
Read Post

EveryOps in 1 Minute: What is GRC?

Jul 27, 2026 By JFrog In JFrog
Governance, Risk, and Compliance — better known as — is an integrated approach that helps organizations align their objectives, manage risks, and meet regulatory requirements, all at the same time. In this quick explainer, we break down: Whether you're new to GRC or looking for a simple way to explain it to your team, this short video gives you the essentials without the jargon.
View Video
teleport

How to Access Internal Web Apps Without a VPN

Jul 24, 2026 By Sami Ali In Teleport
Most organizations start with a VPN when they need to give employees access to internal web applications. The VPN places the user on the internal network, and from there, they can reach the app. This approach works when the user base is small and the number of internal apps is limited. But as teams grow, compliance requirements increase, and the mix of technical and non-technical users increases, a VPN’s network-level connectivity introduces new operational and security challenges.
Read Post

UK Cybersecurity & Resilience Bill Explained | Part 1: Why It Matters

Jul 23, 2026 By CalCom Software In CalCom
What is the UK Cybersecurity & Resilience Bill (CSRB), and why should organisations be paying attention now? In Part 1 of this 6-part series, Dean Roberts explains why the Cybersecurity & Resilience Bill is one of the biggest changes to UK cyber regulation in recent years—and why it's about much more than compliance.
View Video

Every laptop is a credential store: lessons from Vermeer

Jul 22, 2026 By GitGuardian In GitGuardian
Your code repos aren't the only place secrets hide — your laptop is too. In this session, GitGuardian's Emanuelle Franquelin talks with CJ May, Cybersecurity Architect at Vermeer, about extending secrets detection beyond the codebase and onto developer endpoints. They dig into where credentials actually live on modern machines (think config files, shell history, and AI coding agents), why every workstation is fair game, and what to actually do once you find exposed secrets. Watch to see how one enterprise team is tackling credential sprawl to deploy AI safely.
View Video
mend

199 RubyGems, two techniques, zero working payloads: Inside a cryptomining campaign that never ran

Jul 22, 2026 By Maciej Mensfeld In Mend
Mend.io’s research team caught this campaign before most of the open source community ever saw it. Continuous monitoring of RubyGems flagged a batch of gems that looked, at a glance, like an ordinary cryptomining squat, and Mend.io reported the full batch to RubyGems for takedown. Every gem was pulled within hours. Mend.io’s team also pulled two of the samples apart in full, because knowing a campaign exists isn’t the same as knowing how it works.
Read Post
teleport

Identity Security for AI

Jul 21, 2026 By Ben Arent In Teleport
What's scarier than an engineer with prod access? An agent with the same access that never sleeps, never asks, and runs a thousand sessions while you're at lunch. Last year we solved the problem of visibility in the Identity Chain, the concept is that identities are fragmented and it’s hard to get a view from Identity Providers to Infrastructure. Within a year, two things have changed. First, teams are using LLMs & Tools to perform actions on their behalf - fully delegating work to AI Agents.
Read Post
mend

Best 6 AI security posture management platforms (AI-SPM) in 2026

Jul 21, 2026 By Tiffany Jennings In Mend
AI Security Posture Management (AI-SPM) platforms are specialized tools that discover, monitor, and secure AI models, pipelines, and data, mitigating risks like data leakage and model poisoning. They offer continuous visibility, manage misconfigurations, and enforce security policies across cloud services like Azure OpenAI and Bedrock.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.