Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

aikido

Cyber Resilience Act is here! Myth busting and first impressions

Sep 23, 2026 By Jens Gellynck In Aikido
The first deadline of the Cyber Resilience Act went live last week. The Cyber Resilience Act (CRA) is the new EU regulation that defines minimum cybersecurity requirements for all products with digital elements, including their building blocks (hardware and software). It applies to anyone placing products on the EU market, not just companies based there. The full requirements won’t go into effect until the end of next year.
Read Post
Zenity

The Agent Will See You Now: Why Healthcare's AI Agent Boom Needs Visibility and Control

Sep 23, 2026 By Bob Clinton In Zenity
Ask AI to Choose a prompt Write a TLDR of this post Explain the security risk Summarize what CISOs should know Healthcare, as an industry vertical, is moving faster on agentic AI than it has in past technology evolutions. Some reports say it is outpacing other regulated industries. Ambient scribes are documenting patient visits in real time. Prior-authorization and revenue-cycle agents are handling payer workflows that used to require staff to log into multiple systems manually.
Read Post
How to Prepare for a CompTIA Exam Without Paying for a Course

How to Prepare for a CompTIA Exam Without Paying for a Course

Sep 23, 2026 By SecuritySenses In SecuritySenses
CompTIA certifications open real doors - Security+, A+, Network+, and CySA+ appear in job postings from entry-level IT support all the way up to federal security analyst roles. The assumption most people run into is that passing one of these exams requires spending $300 to $500 on an instructor-led course. It doesn't. Candidates who pass without dropping that money aren't cutting corners; they're just smarter about where they find the same information. Official exam objectives, free practice materials, active online communities, and a disciplined self-study schedule give you everything a paid course would - minus the price tag.
Read Post
manageengine

Lessons from Microsoft's September 2026 Patch Tuesday

Sep 22, 2026 By Mahanya V In ManageEngine
This month's Patch Tuesday just became the largest security release in Microsoft's history (so far), and it's tempting to let that record stand as the headline. However, the volume isn't the highlight. What a cycle this size exposes is how most patching processes are built, and exactly where they buckle. Here's what this month actually taught us, and what we need to change before the next record-breaking cycle arrives.
Read Post
New WatchGuard Threat Report Reveals AI Tooling Underpins Tactical Shift from High-Volume Malware Campaigns to Precision Attacks in 1H 2026

New WatchGuard Threat Report Reveals AI Tooling Underpins Tactical Shift from High-Volume Malware Campaigns to Precision Attacks in 1H 2026

Sep 22, 2026 By WatchGuard In WatchGuard
Lower network volume masks broader probing, greater evasion and persistent TLS exposure.
Read Post
netwrix

AI Governance in healthcare: Compliance and security

Sep 22, 2026 By Netwrix Team In Netwrix
AI governance in healthcare has become a question boards and auditors ask directly. They want to know which AI tools reach protected health information, who's accountable for each one, and what evidence shows the controls are holding. Most health systems have a written policy and no way to produce those three answers on request, which is precisely what an auditor tests. Healthcare organizations adopted AI faster than they built the governance to account for it.
Read Post
veracode

Aligning Application Security Software with Business Growth Objectives

Sep 22, 2026 By Natalie Tischler In Veracode
AppSec teams know application risk is growing, but budget conversations are often won and lost outside the security team, in rooms full of executives who speak the language of revenue and delivery velocity, not CVSS scores. The core argument: application security software is easier to fund when it is tied to growth, resilience, compliance, and delivery outcomes… not just technical findings.
Read Post
xona systems

Is Your OT Jump Server Giving Vendors More Access Than They Need?

Sep 22, 2026 By Xona In Xona
A vendor can bypass MFA and sign in with an individual account while still being able to reach industrial systems unrelated to the job. Before replacing your current setup, follow one real service request from approval through completion. The exercise can reveal outdated permissions, unnecessary network connectivity, shared credentials, or records that are difficult to retrieve when you need them.
Read Post
one identity

How Active Roles by One Identity supports IAM in a university environment

Sep 22, 2026 By PeerSpot In One Identity
Managing user accounts, permissions and security access across a university environment involves significant administrative work. For institutions that rely on Microsoft Active Directory, keeping that infrastructure organized, secure and current can quickly become resource-intensive as student and staff populations shift each semester. This type of challenge grows when IT teams must handle onboarding, access changes and offboarding manually for each individual.
Read Post
appsentinels

What Does NIST IR 8587 Mean for API Security?

Sep 22, 2026 By AppSentinels In AppSentinels
On September 15, 2026, NIST published Internal Report 8587, “Protecting Tokens and Assertions from Forgery, Theft, and Misuse.” It’s built to extend NIST Special Publication 800-53 Release 5.1.1, and on paper it reads like an SSO hardening document for government agencies and their cloud vendors.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.