Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

levelblue

LevelBlue SpiderLabs: Breaking Down the Ransomware Groups Targeting the Education Sector

Feb 10, 2026 By LevelBlue In LevelBlue
Ransomware attack groups have ramped up their efforts, launching attacks on the education sector with recent incidents striking a range of targets from an Australian institution of higher learning to a school district in North Carolina. These facilities contain a large amount of very valuable data, such as student records, intellectual property, and financial information that threat groups can leverage for financial gain. An additional reason education is targeted is that it must stay in operation.
Read Post
exabeam

Exabeam Agent Behavior Analytics: First-of-Its-Kind Behavioral Detections for AI Agents

Feb 10, 2026 By Exabeam In Exabeam
AI agents are moving into real workflows faster than most teams expected. According to PwC’s 2025 AI Agent Survey, 79% of companies are already adopting AI agents, and 88% of executives expect to increase AI-related budgets in the next year. These agents are now handling research, summarization, customer engagement, and operational tasks at a scale humans can’t match.
Read Post
foresiet

0-Click RCE in Claude Desktop: How AI Extensions Threaten Endpoint Security

Feb 10, 2026 By foresiet In Foresiet
The modern enterprise software ecosystem increasingly relies on desktop AI applications enhanced through extensible plugin or extension frameworks. These extensions are designed to improve productivity by enabling integrations with local files, browsers, APIs, developer tools, and internal systems. However, this same extensibility introduces a high-risk attack surface when extension permissions, sandboxing, and input validation are weakly enforced.
Read Post
fidelis security

How to Prevent Active Directory Attacks by Securing Privileged Accounts

Feb 10, 2026 By Fidelis Security In Fidelis Security
Let’s be honest—when Active Directory is compromised, the incident is never small. Almost every major enterprise breach involves Active Directory at some point. Attackers may enter through phishing, malware, or a misconfigured endpoint, but their real goal is always the same: gain control over privileged identities and Domain Admin accounts. Once that happens, containment becomes difficult and recovery becomes painful. Preventing Active Directory attacks isn’t about adding more tools.
Read Post
cultureai

A January Snapshot: Real-World AI Usage

Feb 10, 2026 By CultureAI Team In CultureAI
AI is no longer a fringe productivity experiment inside organisations, it is embedded, habitual, and increasingly invisible. This snapshot from CultureAI’s January usage data highlights how AI is actually being used across everyday workflows, and where risk is forming as a result. Rather than focusing on hypothetical threats or model-level concerns, the findings below surface behavioural signals from real interactions: prompts, file uploads, and context accumulation.
Read Post
apono

Apono + SUSE Rancher Prime: Better Together for Secure Kubernetes Access

Feb 10, 2026 By Ben Avner In Apono
As organizations increasingly leverage Kubernetes for modern, cloud-native applications, the challenge of managing these environments securely and at scale grows. A centralized platform is needed to simplify Kubernetes operations, enabling deployment, management, and security across cloud, on-prem, and edge locations. Crucially, access to these Kubernetes environments, particularly production clusters, demands stringent control.
Read Post
graylog

The Human-AI Alliance in Security Operations

Feb 10, 2026 By The Graylog Product Team In Graylog
Picture a SOC analyst starting an investigation. A suspicious spike in authentication activity appears on their dashboard, and they need to understand what’s happening quickly. To do that, they move through a familiar sequence of tools. What begins as a single investigation quickly turns into a chain of context switches: That’s nine steps to investigate one event. This isn’t accidental. Security tools have evolved to solve isolated problems, but together they have created fragmentation.
Read Post
How to Improve Cyber Security and Phishing Protection with a Fractional Executive

How to Improve Cyber Security and Phishing Protection with a Fractional Executive

Feb 10, 2026 By SecuritySenses In SecuritySenses
Many organisations today turn to fractional executives - such as a fractional CEO or fractional CFO - to gain fast access to reliable external expertise that improves operations without committing to a full-time hire. Similar solutions exist for specialised cyber security leadership: a fractional CISO can provide strategic oversight, governance, and risk-based decision-making on a flexible basis. For organisations facing ever-more sophisticated threats and limited internal resources, engaging an expert on a fractional basiscan mean the difference between reactive firefighting and proactive cyber resilience.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.