Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Featured Post
Security on a reactive budget

Security on a reactive budget

Jul 28, 2026 By Katie Barnett, Director of Cyber Security at Toro Solutions In SecuritySenses
Ask most security leaders how their last significant budget increase came about, and the honest answer is rarely "we made the case and won it." It's usually "something happened." A breach, a near-miss, a competitor's headline, an audit finding that couldn't be ignored or a new regulation with a deadline attached. Security spend still moves in response to events far more often than it moves in response to argument, and that has quietly shaped how the function operates: always slightly behind the risk, always justifying itself against the last incident rather than the next one.
Read Post

Single Sign-On (SSO): Examples With Real-World Use Cases And Login Workflows

Jul 27, 2026 By miniOrange In miniOrange
Did you know that stolen or reused credentials show up in 13% of all 19,905 data breaches, according to the 2026 Verizon Data Breach Investigations Report? With the average business employee juggling up to 100 different passwords, it's no wonder security risks and login frustrations are at an all-time high. Studying real Single Sign-On (SSO) examples is one of the best ways to tighten access with a stronger security posture.
Read Post

What is MFA Fatigue? Understanding MFA Bombing Attacks and How to Prevent Them

Jul 27, 2026 By Chaitali Avadhani In miniOrange
Somebody on your team is going to get 40 push notifications on a random Tuesday afternoon and tap "approve" just to make them stop. That's not a hypothetical. It's the most common way attackers get past multi-factor authentication (MFA) today. This piece is for IT and security leaders evaluating an MFA solution or reassessing the one they already have, because an MFA fatigue attack (also called MFA bombing) is now on their radar.
Read Post
knowbe4

Majority of Organizations Hit by Targeted Impersonation Attacks

Jul 27, 2026 By KnowBe4 Team In KnowBe4
Fifty-three percent of organizations have had an executive or employee impersonated in targeted social engineering attacks over the past year, according to a new report from Outtake. Just over half of this impersonation activity took place on social media platforms using fake profiles, followed by video platforms.
Read Post
UTMStack

Top 10 Log Aggregation Tools for 2026: SIEM & Compliance

Jul 27, 2026 By cesmng In UTMStack
You're staring at a growing pile of endpoint, cloud, firewall, and identity logs, and the question isn't whether the data is useful, it's whether you can turn it into evidence, detections, and a defensible audit trail. In regulated environments, HIPAA, PCI, and CMMC don't care that your team is busy, they care that logs are collected consistently, normalized correctly, retained properly, and searchable when an incident or audit hits.
Read Post
cloudflare

We're open-sourcing our privacy proxy CLI

Jul 27, 2026 By Better Internet In Cloudflare
Debugging privacy-preserving protocols is hard. Oblivious HTTP has several different steps across four different parties, not to mention binary HTTP encoding and details spread across many draft RFCs. We've taken what we've learned operating protocols like Oblivious HTTP at the scale of millions of requests per second, and wrapped it up in a nice, clean CLI tool — that we are open-sourcing today. We call it our privacy-client, or pvcli.
Read Post
Zenity

Why AI Security Has to Live at the Decision Point

Jul 27, 2026 By Dina Durutlic In Zenity
For the past couple of years, most of the industry’s attention has gone toward agents that respond to a single prompt. They ask a question, get an answer, and move on. Enterprises are now deploying long-horizon agents; autonomous systems that execute extended, multi-step tasks across hours or days, without a human checking in on every step. These agents plan, reason, and improvise their way toward a goal, and that changes what security has to protect against.
Read Post
CrowdStrike

CrowdStrike Joins the Open Secure AI Alliance to Advance AI Safety and Security

Jul 27, 2026 By Bartley Richardson In CrowdStrike
AI is changing the speed and scale of cyber defense, and the speed and scale of the adversary. As AI becomes embedded across government, critical infrastructure, and enterprise environments, defenders need the ability to inspect, test, adapt, and secure the systems they depend on.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.