Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

signmycode

Microsoft's 2026 NuGet Certificate Update and What It Means for Software Security

Sep 25, 2026 By SignMyCode In SignMyCode
The significance of software supply chain security is on the rise in today’s software development practices. Organizations around the world are increasingly depending upon third-party software libraries, package managers, CI/CD pipelines, and automation for dependency management. Therefore, verifying the authenticity and integrity of software is critical. Starting September 23, 2026, Microsoft will adopt a new certificate for author-signing NuGet packages.
Read Post
keeper

Request and Approve Privileged Access Directly in Google Chat With Keeper Security

Sep 25, 2026 By Anne Cutler In Keeper
Keeper Security, the leading zero-trust and zero-knowledge identity security platform, today announces a new integration that brings approval workflow management and secure credential access directly into Google Chat, extending zero-trust identity governance to Google Workspace environments.
Read Post
Corelight

Investigate your network in plain English: introducing Natural Language Query

Sep 25, 2026 By Adam Pumphrey In Corelight
Every SOC analyst has been there. An alert fires. You know what you need to find. Maybe it's all outbound connections from a specific host that spiked overnight. Maybe it's every DNS query over 100 characters from a subnet you're watching. You know the question. What you don't know is the exact query syntax you need to ask it. So you open the documentation. You search for field names. You try a query, get it wrong, adjust, and try again. Minutes pass.
Read Post
Corelight

Canada Raises the Bar for Critical Infrastructure Cybersecurity. Is Your Network Ready?

Sep 25, 2026 By Eliane Guindon In Corelight
Canada has taken a significant step toward strengthening national cyber resilience. With Royal Assent now granted to Bill C-8, the Government of Canada is establishing a new framework for protecting critical cyber systems and securing the country's most essential services.
Read Post
Torq

What We Learned Testing Jev on Security Alert Triage

Sep 25, 2026 By Yaniv Zimmer In Torq
Yaniv Zimmer is an AI researcher at Torq, focusing on cybersecurity research at the crossroads of artificial intelligence, deep learning, and defensive operations. Drawing on extensive experience within Unit 8200 alongside industry and academic AI research roles, his work centers on advancing SOC AI architectures and threat detection capabilities Like a lot of people, we were excited when Jev launched. The premise is genuinely useful in production: an intelligent language model built for classification.
Read Post
Arctic Wolf

How the Aurora Agentic SOC Is Building the Next Generation of SOC Analysts

Sep 25, 2026 By Lisa Tetrault In Arctic Wolf
AI is changing how security operations work. It can process more data, reduce repetitive work, and move investigations forward faster than human teams could on their own. But speed and scale are not the only factors security leaders should be considering. The more important question is what happens to human expertise when machines take on more of the investigative workload. Across the industry, there is growing concern that AI will narrow the path into technical careers.
Read Post
bluevoyant

The "I" in FOCI: When Foreign Influence Becomes Cyber Risk

Sep 25, 2026 By BlueVoyant Risk Operations Center In BlueVoyant
Foreign Ownership, Control, or Influence (FOCI) risk is often discussed as an ownership problem. Who owns the supplier? Who sits on the board? Is there a parent company tied to a foreign government? Does that relationship trigger CFIUS, export controls, sanctions, or a facility clearance review? These questions matter, but they do not capture the full risk picture. For C-SCRM program stakeholders, the most important word in FOCI is not ownership or control — it is influence.
Read Post
Building an AI-Ready Engineering Team in 2026

Building an AI-Ready Engineering Team in 2026

Sep 25, 2026 By SecuritySenses In SecuritySenses
Two engineering teams can have access to the same AI tools and get very different results. The difference is rarely the technology. It's engineering practices, technical leadership, and a shared understanding of where AI actually helps versus where it produces fast-looking work that creates problems later. Building an AI-ready team isn't about replacing developers with automation or hiring a separate group of AI specialists. It's about preparing existing teams to use AI without giving up the software quality, security, and accountability the work requires.
Read Post
manageengine

DDI Central 6500: Modern DHCP, unified visibility, and layered access control

Sep 24, 2026 By [email protected] In ManageEngine
DDI Central's release 6300 focused on authentication and identity: GSS-TSIG for secure DNS updates, LDAP/LDAPS-based user provisioning, and native Windows scavenging. Each aimed at cutting down the manual work behind keeping DNS and user access clean. DDI Central 6500 shifts focus elsewhere.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.