Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

knowbe4

UK's New Cyber Security and Resilience Bill: What Does It Mean For Critical Infrastructure Organisations?

Nov 26, 2025 By Javvad Malik In KnowBe4
In recent weeks, the UK government has announced the introduction of its new Cyber Security and Resilience Bill. The bill aims to strengthen cyber defences for organisations that fall within the scope of critical national infrastructure (CNI), including the NHS, energy, water and transport sectors, ultimately making these industries more resilient to increasing cyber threats.
Read Post
astra

Introducing Astra Cloud Vulnerability Scanner: Multi-Cloud Security Built for Scale

Nov 26, 2025 By Shikhil Sharma In Astra
1.8X, that’s how much cloud vulnerabilities have skyrocketed over the past year, fueled not just by attackers but by the routine tweaks teams make every day. Modern vulnerability scanners were built to find everything that looks risky. They just never learned to tell what actually is. Dashboards lit with thousands of “critical” alerts, endless CSVs, and reports that read like alarm bells on repeat. Yet less than 10 percent of those alerts ever lead to a real exploit.
Read Post
seal security

Shai-Hulud: The Second Coming Hits npm Users

Nov 26, 2025 By Itamar Sher In Seal Security
Once again, the npm supply chain has been compromised, putting developers relying on these vital open source components at risk. On November 24th, a sophisticated attack that borrows techniques from the Shai-Hulud malware used in the npm hijacking this past September was discovered. This is not an isolated incident. It’s a continuation of an existing campaign that is now abusing CI/CD pipelines, and GitHub automation to spread faster and steal more secrets than before.
Read Post
Zenity

The Genesis Mission: A New Era of AI-Accelerated Science and a New Security Imperative

Nov 26, 2025 By Kayla Underkoffler In Zenity
Innovation has always been the engine of American advancement. With the launch of the Genesis Mission, the White House is signaling a new era of AI-accelerated scientific discovery. This executive order directs the Department of Energy to build an integrated, national-scale AI platform designed to unlock scientific breakthroughs across biotechnology, energy, materials, quantum systems, and beyond.
Read Post

The REAL Reason Scam Ads Won't Go Away

Nov 26, 2025 By Cloudflare In Cloudflare
Why are scam ads and phishing sites still everywhere? Despite the tech, resources, and talent in cybersecurity, we still find ourselves playing catch-up instead of leading the charge. One of the reasons? The industry's reactive nature and the fragmented state of intelligence sharing. In the latest episode of The Connectivity Cloud Podcast, Vladimir Krupnov and Blake Darché explore how companies like Revolut are pushing for a more proactive, collaborative, and disruptive approach to cyber defence.
View Video

The Death of Passwords: The Future of Authentication

Nov 26, 2025 By Razorthorn Security In Razorthorn
Is passwordless authentication finally ready for prime time, or are we just replacing one set of problems with another? Welcome to Razorwire, the podcast where we share our take on the world of cybersecurity with direct, practical advice for professionals and business owners alike. I’m Jim and in this episode, we’re tackling one of the oldest challenges in information security: identity and access management.
View Video
ionix

CVE-2025-61757: Critical Pre-Auth RCE in Oracle Identity Manager

Nov 26, 2025 By Zach Bistra In IONIX
A newly disclosed vulnerability, CVE-2025-61757, exposes Oracle Identity Manager (OIM) to unauthenticated remote code execution (RCE). The flaw affects OIM versions 12.2.1.4.0 and 14.1.2.1.0 and carries a CVSS 9.8 Critical rating. CISA has added it to the Known Exploited Vulnerabilities (KEV) catalog — meaning active exploitation is confirmed.
Read Post
graylog

MCP ROI in a New Era of AI Orchestrated Threats

Nov 26, 2025 By The Graylog Team In Graylog
Security leaders spent most of the past year testing AI driven security automation. Many discovered that the promise of fully autonomous SOC operations collided with the reality of hallucinations, opaque recommendations, and inconsistent outcomes. McKinsey research now shows that more than 80 percent of organizations have not realized meaningful results from gen AI programs.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.