ThreatQuotient

Enhancing Threat Intelligence and Threat Detection in Australian Central Government Organisations

Apr 29, 2025 By ThreatQuotient In ThreatQuotient
In an era where digital frontiers are continuously expanding and evolving, adaptability is critical for Federal, State, and Local Government Departments, and Agencies to secure their infrastructure and sensitive data. Progress and growth strategies must be aligned with defense against growing cyber threats. Cyber threat intelligence (CTI) and threat detection have emerged as essential strategies for proactively identifying and mitigating cyber risks.
Read Post

GitLab's CISO Josh Lemos on the pros and cons of making security practices public

Apr 29, 2025 By Tines In Tines
In this week’s episode of The Future of Security Operations podcast, Thomas is joined by Josh Lemos, CISO at GitLab. Throughout his 15-year career in security, Josh has led teams at ServiceNow, Cylance, and Square. Known for his expertise in AI-driven security strategies, Josh is also a board member with HiddenLayer. He drives innovation at GitLab with a relentless focus on offensive security, identity management, and automation.
View Video
gitguardian

A Look Into the Secrets of MCP: The New Secret Leak Source

Apr 29, 2025 By Gaetan Ferry In GitGuardian
MCP rapidly enhances AI capabilities but introduces security challenges through its distributed architecture. Especially, the distributed nature of MCP requires a lot of NHIs and their secrets. Our research shows that MCP is a new source of leaks that already discloses real-world secrets.
Read Post
cyjax

A Brief History of Threat Intelligence: How We Got Here

Apr 29, 2025 By Shail Yadav In CYJAX
Although cyber threat intelligence has become increasingly important in the modern era, driven by the exponential rise in cybercrime and global dependence on digital infrastructure, the foundational concept of threat intelligence is not a recent development. In 2024, just over four in ten businesses (43%) and three in ten charities (30%) reported experiencing some form of cybersecurity breach or attack in the previous 12 months, highlighting the scale of today’s threat landscape.
Read Post
CrowdStrike

CrowdStrike Strengthens Data Security Across Endpoint, Cloud, and SaaS Applications

Apr 29, 2025 By Luke Hunsinger - Max Gebhardt In CrowdStrike
CrowdStrike is expanding the capabilities of CrowdStrike Falcon Data Protection and introducing a new offering, SaaS Threat Services, enabling security teams to protect sensitive data across endpoints, cloud environments, and GenAI and SaaS applications. Today’s adversaries are targeting data wherever it resides. As GenAI adoption accelerates, misconfigured applications and unsecured usage create new vectors for data exposure.
Read Post
elastic

Threat hunting in Elastic with JOINs!

Apr 29, 2025 By Paul Ewing, In Elastic
Elastic’s piped query language, ES|QL, brings joins to the party Threat hunters rejoice! Have you been looking for a way to join data with the speed and power of Elastic? Well, we heard you! Elastic can now join data sources with a new function for the piped query language, ES|QL (Elasticsearch Query Language). This will enable robust searches that range from advanced behavior detections to alert triage and of course, threat hunting.
Read Post

How to Set Up AWS Traffic Mirroring for Astra API Monitoring | Full Step-by-Step Guide

Apr 29, 2025 By Astra Security In Astra
This tutorial provides a complete walkthrough for setting up AWS VPC Traffic Mirroring to enable packet-level monitoring with Astra’s API Security platform. You'll learn how to configure a scalable and production-ready environment using Network Load Balancers, Nitro-based EC2 instances, and properly filtered traffic sessions. The guide includes: It also covers key assumptions, unsupported configurations (like classic/Xen instances), and best practices for a secure and efficient deployment.
View Video
cyberhaven

Security for AI: enabling secure AI adoption across the enterprise

Apr 29, 2025 By Bruce Chen In Cyberhaven
AI is transforming productivity across every industry—from marketing and design to legal and engineering. But while employees rush to embrace tools like ChatGPT, Gemini, and Microsoft Copilot, many are using other tools without oversight from IT or security. As this grassroots usage grows, so does the volume—and sensitivity—of data flowing into AI tools.
Read Post
Subscribe to Security

Copyright © 2026 OpsMatters™. All rights reserved.