nightfall

100 SaaS Apps. One Query. Zero Alerts: How Glean and Claude Cowork Expose the Agentic AI Data Risk

Mar 5, 2026 By Chris Martinez In Nightfall
A sales rep opened Glean—an AI-powered enterprise search platform that connects to your company's SaaS apps and lets anyone query across all of them in natural language—typed "Who are my top 10 customers?" and got a clean, formatted list pulled from Salesforce, cross-referenced with HubSpot, and confirmed against data sitting in Google Drive. They copy-pasted that list into a personal Gmail draft. No alerts fired. No policies triggered. No one noticed. This isn't a hypothetical.
Read Post
kovrr

EU AI Act Compliance Explained for CISOs and GRC Leaders

Mar 5, 2026 By Kovrr In Kovrr
‍The European Union's Artificial Intelligence Act (EU AI Act) represents the first comprehensive attempt by a major regulator to establish legal oversight of artificial intelligence. Its objective is to ensure that AI systems deployed across the EU operate safely, transparently, and in a manner that protects fundamental rights.
Read Post
nakivo

6 Ways to Move a VMware VM from One EXSi Host to Another

Mar 5, 2026 By NAKIVO Team In NAKIVO
When you have more than one ESXi host in your environment, you may need to migrate virtual machines from one host to another. The reason can be rational resource usage or insufficient computing resources on one of the hosts. Learn about the methods available to you to migrate virtual machines in VMware vSphere with and without vCenter.
Read Post
levelblue

LevelBlue Partners With Tenable to Deliver Expanded Vulnerability and Exposure Management Capabilities

Mar 5, 2026 By LevelBlue In LevelBlue
Periodic vulnerability scans should no longer be an acceptable standard by any security-minded organization. What is needed is the ability for MSSPs to quickly identify and prioritize risks across all client environments. To enable this capability LevelBlue has developed and rolled out LevelBlue Exposure Management for Partners. This solution delivers continuous visibility, meaningful context, and clarity around how risks could impact the business.
Read Post
Zenity

PerplexedBrowser: Accepting a Meeting or Handing Your Local Files to an Attacker?

Mar 5, 2026 By Greg Zemlin In Zenity
How a routine calendar invite enabled silent local file access and data exfiltration Note: This post is part of a coordinated disclosure by Zenity Labs detailing the PleaseFix vulnerability family affecting the Perplexity Comet Agentic Browser. This blog focuses on browser-level autonomous agent execution and session compromise.
Read Post
tanium

Why EDR isn't enough on its own

Mar 5, 2026 By Tanium In Tanium
Editor's note: The following guest contribution is by Tanium Domain Acrchitect, Jim Kelly Think about your last security event. Was your team confident nothing was missed? Were there questions about where else this could have left persistence? Most often we are left with uncertainty. That uncertainty can show up in every serious incident. An alert fires, the SOC responds. The immediate threat looks like it is contained.
Read Post

Ep. 38 - The Evolution of Offensive Cybersecurity

Mar 5, 2026 By SafeBreach In SafeBreach
"Hope is not a strategy." The roots of hacking go deeper than you think—all the way back to Bletchley Park and the first computers ever built. In the latest episode, Adrian Culley joins Tova Dvorin to trace the evolution of offensive security: from 1970s "phone freakers" to the sophisticated Breach & Attack Simulation (BAS) of today. The Insight: Penetration testing was a vital evolution, but it’s a "photo of a moving target." Modern resilience requires a "cyber training gym"—a continuous, automated sparring partner that validates your defenses against the latest TTPs 24/7/365.
View Video
securonix

VOID#GEIST: Stealthy MultiStage Python Loader with Embedded Runtime Deployment, Startup Persistence, and Fileless Early Bird APC Injection into explorer.exe

Mar 5, 2026 By tldr: In Securonix
Securonix Threat Research analyzed a stealthy, multi-stage malware intrusion chain utilizing an obfuscated batch script (non.bat) to deliver multiple encrypted RAT shellcode payloads corresponding to XWorm, XenoRAT, and AsyncRAT.
Read Post
sentrium

Common ecommerce security vulnerabilities and testing strategies

Mar 5, 2026 By Adam King In Sentrium
Ecommerce platforms represent one of the most consistently targeted areas of the modern digital estate. They process payment data, store personal information, integrate with logistics and marketing systems, and underpin revenue for many large businesses. The combination of financial value and sensitive data makes ecommerce security vulnerabilities an attractive target for attackers.
Read Post
Subscribe to Security

Copyright © 2026 OpsMatters™. All rights reserved.