Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Tines

What's new in Tines: June 2025 edition

Jul 1, 2025 By Hannah Roy In Tines
Did you hear the news? You can now build and deploy agents in Tines using the AI Agent action type - an evolution of our AI action! AI on the Storyboard just got even more powerful, with the opportunity to build your workflows as autonomous as you choose with the help of an agent. Using the tools from your tech stack, the agents you build are designed to reason, decide, and act on your behalf. Curious to see it in action?
Read Post
sumologic

Stop writing dumb AI security policies: use threat models, not fear

Jul 1, 2025 By David Girvin In Sumo Logic
Every time someone asks me about building their AI policy, I die a little inside. Not because it’s a bad question, but because my answer is always the same: “Can we not build it off pure fear for once?” Most people don’t understand how AI architecture works, so their first instinct is to panic. And, we’ve seen this movie before: cloud, mobile, bring your own device (BYOD).
Read Post
cyjax

A Pressing Matter Part I - The Simplification of Ransomware Crime Development Through Cybercriminal Forums

Jul 1, 2025 By Adam Price In CYJAX
Five centuries after the printing press was invented, the digital age began. With significant revolutions in knowledge dissemination, the era taking place now has seen vast amounts of information become instantly accessible. Whilst this is generally seen as a positive in most countries worldwide, malicious intentions persist across the digital world.
Read Post
Arctic Wolf

Credential Theft Campaign Targets Legal Sector via Spoofed Emails Delivering Malicious HTM File Mimicking O365 Login Page

Jul 1, 2025 By Andres Ramos In Arctic Wolf
Arctic Wolf has recently observed a campaign targeting the legal industry using a combination of brute-force and spearphishing techniques. Threat actors initially attempted to brute-force multiple user accounts. After those efforts were unsuccessful, they pivoted to spearphishing by sending spoofed emails that appeared to originate from internal users. These emails used the subject line “Reminder-Your-to-do-list” and contained a malicious.HTM attachment.
Read Post
foresiet

Inside Qilin's New Legal Pressure Tactic: How 'Call a Lawyer' Increases Ransomware Success

Jul 1, 2025 By Foresiet In Foresiet
In the cybercrime ecosystem, innovation often comes in disturbing forms. The ransomware group Qilin—already notorious for offering a full suite of extortion tools to affiliates—has introduced a new feature that elevates psychological warfare to a new level: a “Call a Lawyer” button. This isn’t satire. This is real social engineering, now backed with actual legal threats.
Read Post
appknox

How Secure Is WhatsApp in 2025? [Appknox's Pentesters Reveal 5 Critical Vulnerabilities]

Jul 1, 2025 By Raghunandan J In Appknox
June 2025 has seen WhatsApp back in the headlines—this time for all the wrong reasons. Earlier this month, The National broke the story: WhatsApp’s security is under renewed scrutiny following revelations that Israel remains the only known actor to have successfully exploited it. But if history has taught us anything, it’s this: if one nation-state can do it, others may follow. At Appknox, we decided to verify the current state of WhatsApp’s mobile app security for ourselves.
Read Post
1Password

Why Omdia recommends Extended Access Management to simplify compliance

Jul 1, 2025 By Elaine Atwell In 1Password
Omdia, a global analyst and advisory leader, recently released a report called “How Extended Access Management (XAM) closes the gaps in security.” This report describes how existing approaches to access management have failed to address the security, budgetary, and compliance risks posed by unmanaged identities, applications, and devices.
Read Post
trustcloud

ISO 27001 certification: Cost, process, timelines and implementation in 2025

Jul 1, 2025 By Richa Tiwari In TrustCloud
In this article Businesses looking for serious compliance street cred often turn first to ISO 27001. ISO 27001 is a globally recognized framework that outlines and defines information security management system (ISMS) requirements. Because being ISO 27001 certified demonstrates an organization meets best practices for information security, ISO certification can give businesses a significant competitive advantage. If you’re weighing ISO 27001 vs.
Read Post
5 Ways Regulatory Changes Are Shaping Data Security Strategies

5 Ways Regulatory Changes Are Shaping Data Security Strategies

Jul 1, 2025 By SecuritySenses In SecuritySenses
Today's regulations and info edicts aren't just red tape-they're rewriting the rules of how you protect data, especially as you swim through the web. From breach reporting to global privacy laws, keeping up with compliance updates can help you walk through a smarter, faster security game for your personal and professional interests. This is why, if you're handling and managing sensitive info-or just want to avoid fines and fallout-here's how the latest legal shifts are reshaping how you can secure what matters most.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.