Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Ep. 4: The Sony Playbook

Jun 30, 2026 By Rubrik In Rubrik
It’s been nearly 12 years since North Korea launched its crippling attack on Sony Pictures Entertainment over a Seth Rogen film. Most Americans remember the celebrity leaks, the embarrassing emails, the Hollywood spectacle of it all. What they missed was the playbook: Why simply hack an organization when you can bleed reputations dry? Turn stolen data into psychological warfare. It was a model that would soon echo everywhere from Russian intelligence operations to modern ransomware gangs.
View Video
miniorange

NIST Privileged Access Management: Complying with the NIST Requirements

Jun 30, 2026 By Stutee Raja In miniOrange
Privileged accounts are the crown jewels of any IT environment. Admin credentials, root access, service accounts. These are what attackers go after first, because compromising one can hand them the entire organization. Forrester puts the number at 80% of security breaches involving privileged accounts. NIST frameworks, particularly SP 800-53, exist to make sure you're not leaving that door unlocked.
Read Post
miniorange

OAuth vs. API Keys for AI Agents: Why Static Credentials Break in Production Systems

Jun 30, 2026 By miniOrange In miniOrange
How do you ensure AI agents authenticate when they interact with your entire enterprise ecosystem when you aren’t there to watch their every move? Today, AI agents can do many things autonomously. They can update CRM records, create tickets, trigger workflows, modify data, and just about anything. The importance of authentication increases as they become more autonomous day by day. For years, API keys were the easy default for connecting applications to APIs.
Read Post
veracode

Top 10 Application Security Risks (2026 Edition)

Jun 30, 2026 By Theo Weismann In Veracode
You already know the threats are getting worse. What’s harder to articulate — especially to leadership — is exactly how they’re getting worse, and what’s slipping through the cracks in your current program. The application security risks your teams face in 2026 are not just more numerous than they were five years ago; they’re structurally different.
Read Post
Torq

The Four Biggest Gaps in Today's AI SOC Vendor Market

Jun 30, 2026 By Torq In Torq
A year ago, a handful of vendors called themselves an “AI SOC.” Today, more than 100 do. The label now means whatever the person selling it needs it to mean, leaving security teams to buy very different products under the same two words. So let’s sort the market. Beneath the “agentic” branding, most AI SOC vendors fall into one of four categories, and none of them clears the bar. Each can look capable in a demo.
Read Post
vanta

What Is a risk register? Best practices for keeping It actionable

Jun 30, 2026 By Vanta In Vanta
Accelerating security solutions for small businesses‍ Tagore offers strategic services to small businesses. A partnership that can scale‍ Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate. Standing out from competitors‍ Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.
Read Post
Arctic Wolf

AWS Summit 2026: Autonomous Security Is Here. Turning It Into Outcomes Requires a New Operating Model

Jun 30, 2026 By Will Briggs In Arctic Wolf
At the recent AWS Summits in New York and Toronto, Arctic Wolf was present to hear AWS introduce a set of security capabilities built to run continuously and act at machine speed. New approaches to vulnerability management, deeper integration of security into development workflows, and expanded context through knowledge mapping all point in the same direction: Security operations are becoming persistent, automated, and increasingly driven by AI.
Read Post
Arctic Wolf

From CitrixBleed 2 to Cloudflared: The Tools and Techniques Behind Anubis Ransomware Attacks

Jun 30, 2026 By Arctic Wolf Labs In Arctic Wolf
Throughout 2026, Arctic Wolf has investigated multiple Anubis ransomware intrusions. Although threat actor tradecraft differs between intrusions, key themes have emerged: abuse of VPN infrastructure, blending in with legitimate activity through the use of Remote Monitoring and Management (RMM) solutions, and using other legitimate binaries on victim devices.
Read Post

The evolving fraud landscape in the age of AI with Tamas Kadar [334]

Jun 30, 2026 By LimaCharlie In LimaCharlie
Today we're speaking with Tamas Kadar, CEO / Co-Founder of SEON, about building a safer digital world for businesses. We touch on fraud, how it's evolved in the age of AI, and what we can do to protect ourselves against it. Tamas' entrepreneurial path began at Corvinus University in Budapest, where the vision for SEON first took shape. Co-founding a cryptocurrency exchange opened his eyes to the scale and complexity of online fraud, sparking the idea for something better. In 2017, that “something better” became SEON.
View Video
protecto

What Is Privacy-by-Design and Why Is It Important?

Jun 30, 2026 By Mariyam Jameela In Protecto
Every AI application relies on data. From customer conversations and healthcare records to financial transactions, organizations process enormous volumes of sensitive information every day. As AI adoption grows, so does the need to protect that data from misuse, exposure, and compliance risks. This is why understanding what privacy by design entails has become a business necessity rather than just a compliance requirement.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.