Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

levelblue

Beyond the Inbox: How BEC Leads to SSO Abuse

Aug 13, 2026 By Jamie Mamroe and Federico Cedolini In LevelBlue
For years, many business email compromise (BEC) investigations have followed a familiar playbook: an attacker phishes credentials, logs into the victim's mailbox, establishes persistence with inbox rules, monitors communications, and waits for an opportunity to steal money or sensitive information. Today, we're seeing something different at LevelBlue. Across multiple recent investigations, we've observed attackers treating a compromised mailbox as just the first step.
Read Post

Sophos MDR: Define MDR Contacts in Sophos Central

Aug 13, 2026 By Sophos In Sophos
A step-by-step tutorial showing you how to define your Sophos Managed Detection and Response (MDR) authorized contacts and threat response mode in Sophos Central. As a Sophos MDR customer, assigning authorized contacts lets you fully utilize the service. This instructs the Sophos MDR Operations team who to contact and how to take action during an active threat. You're prompted to take these steps in Sophos Central after activating a new Sophos MDR license, and you can modify this information at any time.
View Video
mend

OWASP LLM Top 10 2026: the model will be fooled, the question is what breaks

Aug 13, 2026 By Asaf Saar In Mend
The OWASP GenAI Security Project published the 2026 edition of its Top 10 for LLM Applications. Prompt Injection stayed at number one. Sensitive Information Disclosure stayed at number two. Read the headlines and you would conclude that not much moved. Something did move, and it is not in the rankings. The project leads open by telling you to stop trying to build a model that cannot be fooled, and to build the system around it so that when the model is fooled, nothing important breaks.
Read Post
kovrr

What an AI Compliance Audit Involves, Stage by Stage

Aug 13, 2026 By Kovrr In Kovrr
An AI compliance audit is less mysterious than its absence from most planning suggests. Someone outside the organization reads what you wrote down, then samples real systems to test whether the organization does what the documents describe. The distance between those two things is where findings come from. ‍ Three different exercises get called an AI audit, and they run differently. Certification against a management standard follows a defined two-stage process.
Read Post
kovrr

Where Cyber Loss Comes From: Attack Vectors Ranked by Exposure

Aug 13, 2026 By Kovrr In Kovrr
Security awareness receives a disproportionate share of attention relative to the exposure phishing carries. Modeled against initial access technique, valid account abuse accounts for around a quarter of expected annual loss in a typical portfolio, exploitation of public-facing applications around a fifth, and human error around a seventh. Phishing appears sixth, at roughly seven percent.
Read Post
UTMStack

MITRE ATT&CK Framework: A Practical Guide for SOC Teams

Aug 13, 2026 By cesmng In UTMStack
You are already in the meeting, and the question on the table sounds simple: can the SOC detect a technique tied to a noisy intrusion path? Three analysts answer three different ways because each one is staring at a different dashboard, a different log source, and a different mental model. The MITRE ATT&CK framework gives those people one shared way to describe adversary behavior, so the discussion starts with evidence instead of guesswork.
Read Post

How to Install NAKIVO Backup & Replication on Linux

Aug 13, 2026 By NAKIVO In NAKIVO
This guide shows you how to install the full NAKIVO solution — director, transporter and a default backup repository — on a Linux server in console mode. You'll also see which requirements to check before you start, and how silent installation lets you deploy NAKIVO automatically instead of running each step by hand.
View Video
cato networks

How Cato AI Security Keeps Up With Claude

Aug 13, 2026 By Liron Hakim Bobrov In Cato Networks
Claude is moving quickly. Cato is innovating alongside it. With inference hooks, skills posture, and seamless deployment, teams can adopt new AI capabilities with security controls that are ready from day one. Claude’s rapid innovation is reshaping what everyday employees can do with AI. It is no longer just helping people write faster or summarize information; it is becoming a hands-on work companion that can research, reason, build, and take action across business workflows.
Read Post
cato networks

The Agentic AI Security Adoption Matrix: Autonomy Scales Where Control Exists

Aug 13, 2026 By Dr. Guy Waizel In Cato Networks
Agentic AI is crossing a threshold. It is no longer just generating content or answering questions. It is beginning to plan, decide, and execute actions across tools, systems, and workflows. That shift unlocks real efficiency, but it also changes the security equation. When an AI system can act, it becomes part of your operational attack surface. It can be influenced, misdirected, or exploited. It can make mistakes at machine speed. And if it has permissions, it can create real impact.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.