Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

nightfall

The Cloudflare Breach: Why Supply Chain Security Can't Be an Afterthought in 2025

Sep 4, 2025 By Anant Mahajan In Nightfall
The cybersecurity industry woke up to yet another supply chain nightmare this week. Cloudflare, one of the world's largest web infrastructure companies, confirmed that attackers accessed 104 of their API tokens through the cascading Salesloft Drift breach. This incident perfectly illustrates why modern organizations need to rethink their approach to third-party vendor security.
Read Post
mend

Why AI Security Tools Are Different and 9 Tools to Know in 2025

Sep 4, 2025 By Mend.io Team In Mend
As companies embed AI models into their applications, they face risks that traditional security tools weren’t designed to catch, such as prompt injection, data leakage, model poisoning, and shadow AI. Addressing these threats requires a new class of security tools built specifically for AI specific risk.
Read Post
vanta

IT compliance audit checklist: 7 steps to follow

Sep 4, 2025 By Vanta In Vanta
As IT threats and vulnerabilities continue to evolve, regulatory and compliance demands are growing in response. Many organizations today need to navigate multiple mandatory security frameworks and regulations. According to Vanta’s 2025 Trust Maturity Report, 90% of respondents cite compliance requirements as a top driver for investing in security. ‍ Maintaining compliance with the necessary frameworks requires continuous monitoring of your security posture and critical controls updates.
Read Post
cyberark

Defeating Microsoft EPM in the Race to Admin: a Tale of a LPE vulnerability

Sep 4, 2025 By Rotem Salinas In CyberArk
Not too long ago I read an interesting blogpost by SpecterOps about Microsoft EPM that got my attention as I was not aware of this Microsoft product/feature. It was interesting to learn that Microsoft expanded into the realm of Endpoint Privilege Management and since this means that there must be some service/driver running with high privileges that elevates low-privileged processes, I thought there could be potential vulnerabilities and bugs.
Read Post
cyberark

Cheaters never win: large-scale campaign targets gamers who cheat with StealC and cryptojacking

Sep 4, 2025 By Ari Novick In CyberArk
A sprawling cyber campaign is turning gamers’ hunger to gain an edge into a massive payday for threat actors who are leveraging over 250 malware samples to steal credentials and cryptocurrencies. The operation has already netted wallets containing more than US$135,000. In this blog post, we will delve into a specific infection instance, explore its mechanisms. and share indicators of compromise (IoCs).
Read Post
indusface

eCommerce and Retail Penetration Testing: Protect Payments, Customer Data, and Compliance

Sep 4, 2025 By Vinugayathri Chinnasamy In Indusface
Penetration testing for eCommerce and retail has become critical as these industries face escalating cyber threats, making them prime targets for attackers seeking financial gain and sensitive customer data. According to IBM’s 2025 Cost of a Data Breach Report, the global average cost of a data breach reached $4.44 million.
Read Post
trustcloud

Empower remote teams: Update your BYOD policy for 2025

Sep 4, 2025 By Shweta Dhole In TrustCloud
The landscape of work has transformed dramatically over the past decade, with remote work emerging as a sustainable and sometimes preferred approach for many companies. As this trend accelerates, organizations face the dual challenges of maintaining productivity while securing a distributed workforce. One of the most effective ways to empower remote teams is to update and modernize your bring your own device (BYOD) policy.
Read Post
Advanced Trash Compactor Repair

Advanced Trash Compactor Repair

Sep 4, 2025 By SecuritySenses In SecuritySenses
Modern kitchens and commercial facilities depend on technology that saves time, improves convenience, and streamlines daily routines. Among these innovations, trash compactors stand out as a piece of technology that often goes unnoticed until it stops working. By compressing waste into smaller loads, compactors combine mechanical engineering, electrical systems, and user-friendly design to deliver efficiency in waste management. But when problems arise, this technology requires skilled hands to restore its performance.
Read Post
certkit

Why We Built CertKit

Sep 3, 2025 By Todd H. Gardner In CertKit
SSL Certificates have always been a pain in the butt. From the magical OpenSSL incantations to generate a CSR to the various formats that each webserver requires. Remembering what hardware needs which certificates. Managing scheduled renewals and runbooks for which file goes where. Screw anything up and your site is “Not Secure”. And now Apple wants us to do it every 47 days. Remember when we had HTTP-only websites? Or when certificates lasted three years? Then one?
Read Post
gitguardian

When Google Says "Scan for Secrets": A Complete Guide to Finding Hidden Credentials in Salesforce

Sep 3, 2025 By Guillaume Valadon In GitGuardian
The Salesloft Drift breach affected hundreds of organizations through Salesforce, including Cloudflare, Palo Alto Networks, and Zscaler. Google now explicitly recommends running secrets scanning tools across Salesforce data—here's your complete guide.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.