Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

sophos

Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation

Sep 15, 2026 By Sophos Counter Threat Unit Research Team In Sophos
On September 14, 2026, Cisco disclosed a vulnerability in Cisco Secure Email Gateway. CVE-2026-76461 is a critical (CVSS score of 9.8) SQL injection flaw in the email parsing functionality of Cisco AsyncOS Software. Successful exploitation “could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.” Cisco confirmed exploitation of the vulnerability in the wild, and the U.S.
Read Post
sophos

MSP Perspectives 2026: The evolution of the MSP cybersecurity value proposition

Sep 15, 2026 By Sophos In Sophos
MSPs are no longer simply being asked to manage technology; increasingly, customers are expecting them to provide cybersecurity leadership, deliver compliance programs, and guide security investment. Sophos’ 2026 MSP Perspectives Report reveals how demand for cybersecurity leadership, maturing compliance offerings, and the battle for scale are all shaping the managed services market.
Read Post
jfrog

ParaShells: Parallels Desktop Turns Appliance Install Into a Root Shell

Sep 15, 2026 By Yuval Moravchick In JFrog
Your Mac runs a vulnerable version of Parallels Desktop. A malicious package, compromised CI job, or other unprivileged process is already running on it. No admin access. No Parallels-signed client. One appliance-install request later, attacker-controlled code runs as root. While testing Desktop 26.4.0 (build 57513) on Apple silicon, we found that an unprivileged local user could execute code as root through prl_disp_service.
Read Post
Tines

The AI SOC is commoditized. Here's why building our own is the next frontier.

Sep 15, 2026 By Tines In Tines
If you walked the floor at Black Hat this year, you likely noticed a glaring trend: the AI Security Operations Center (SOC) is no longer a bleeding-edge novelty. It’s officially a commodity. With close to 70 AI SOC platform companies vying for attention, the market is completely saturated. What was once the hottest standalone category in cybersecurity is rapidly becoming a standard feature.
Read Post
acronis

OT vulnerability management for Windows and Linux workstations

Sep 15, 2026 By Subramani Rao, In Acronis
OT vulnerability management for Windows and Linux workstations means discovering, assessing, prioritizing and remediating, or deliberately mitigating, software flaws on the general-purpose computers that run supervisory control, historian and engineering functions inside a plant, without disrupting the physical process those computers support. That definition already implies a second, separate layer: the PLCs, RTUs and field devices that this same approach cannot safely touch.
Read Post
Ranked: The 10 Best AI SEO Agencies for 2026

Ranked: The 10 Best AI SEO Agencies for 2026

Sep 15, 2026 By SecuritySenses In SecuritySenses
SEO is having a bit of a moment. Getting onto page one of Google still matters, of course, but that is no longer the whole picture. Brands now also need to think about whether they are being mentioned in AI-generated answers, summaries, recommendations, and conversational search results. That is where AI SEO comes in. The strongest agencies in 2026 are not throwing traditional SEO out the window. They are combining the fundamentals that still work with newer strategies built around AI search visibility, authority, brand mentions, and genuinely useful content.
Read Post
Red Teaming Agentic AI: Why Testing the Model Is No Longer Enough

Red Teaming Agentic AI: Why Testing the Model Is No Longer Enough

Sep 15, 2026 By SecuritySenses In SecuritySenses
In January 2025, NIST's Center for AI Standards and Innovation published red team results that should have changed how enterprises test autonomous systems. Against an AI agent operating in simulated workspace, travel, Slack and banking environments, the strongest previously known hijacking attack succeeded 11% of the time. The strongest new attack developed by the red team succeeded 81% of the time. The model had not changed. The evaluation had.
Read Post
cyjax

The Cybersecurity Visibility Gap: What You Can't See Can Still Hurt You

Sep 14, 2026 By Shail Yadav In CYJAX
Most security programmes are built to watch the inside of the network, but the threats that do the most damage often start outside it: leaked credentials, impersonated domains, dark web chatter, and vulnerabilities under active discussion. This post looks at why the visibility gap exists, what the data says about it, and what closing it involves.
Read Post
device authority

AI is learning to control machines...but can it trust them?

Sep 14, 2026 By Claire Tennant In Device Authority
Anthropic’s new Model Hardware Standard (MHS) could mark an important step in the evolution of agentic AI. Currently in research preview, MHS provides a standardized way for AI agents to discover, understand and operate physical equipment. Anthropic is already demonstrating the concept with laboratory and manufacturing equipment including robotic arms, microscopes, liquid handlers and laser systems. The objective is compelling.
Read Post
upguard

Good Security Rating? Your Dark Web Exposure Says Otherwise

Sep 14, 2026 By Lance Turner In UpGuard
Ask a security leader how secure their company is, and most will point to a number. A rating, maybe a grade, or a score out of some maximum that a vendor calculated for them. That number only measures half the problem. It tells you about your infrastructure: your email configuration, your encryption, what's visible on the internet. It tells you much less about whether your employees' credentials are already exposed to an attacker.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.