Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Data Center Episode: Power, Water & Local Impact | Attempted Intelligence Ep. 2

Oct 21, 2026 By KnowBe4 | Securing Humans & Agents In KnowBe4
How much power and water do AI data centers actually consume—and what does their growth mean for local communities? In Episode 2 of Attempted Intelligence, hosts Harlan Parrott (VP of AI Innovation at KnowBe4) and Matt Duren (SVP of Engineering for AI & Data) go head-to-head in a friendly debate over the environmental and economic realities of AI infrastructure. A coin flip assigns their positions as they tackle the viral claims surrounding AI energy consumption, local water usage, and the trade-offs facing local governments.
View Video
aikido

What you need to know about PHP2shell. Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)

Oct 21, 2026 By Willem Delbare In Aikido
Two critical remote code execution vulnerabilities have been found in PHP itself. Treat all versions as affected. ‍The vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both have a CVSS v4.0 score of 9.2. The PHP security team will release fixes on October 21, 2026, at 16:00 CEST / 10:00 EDT / 07:00 PT. If you run PHP anywhere in your stack, please stay tuned for workarounds and patches. Be prepared to take action.
Read Post

Bitsight AI Mode: AI-Powered Cyber Risk Intelligence & Agentic Workflows

Oct 20, 2026 By Bitsight In BitSight
Meet Bitsight AI Mode, a new way to investigate cyber risk, prioritize critical exposures, and accelerate security decisions using AI-powered intelligence and agentic workflows. Built directly into the Bitsight platform, AI Mode combines conversational AI with automated, multi-step analysis to help security and risk teams turn complex cyber risk data into actionable insights. With Bitsight AI Mode, you can.
View Video
sophos

BRONZE SANDCASTLE deploys modified Meterpreter shells

Oct 20, 2026 By Sophos Counter Threat Unit Research Team In Sophos
The China-based threat group uses DLL sideloading in these attacks Counter Threat Unit (CTU) and SophosLabs researchers investigated a cluster of incidents attributed to the BRONZE SANDCASTLE threat group. The most distinctive technical marker for BRONZE SANDCASTLE is its consistent use of Sandboxie DLL sideloading.
Read Post
sophos

Why Incident Response Demand Will Grow Faster than Expected

Oct 20, 2026 By Dan Levesque In Sophos
This article is part of an ongoing series from Sophos frontline security operations specialists, sharing the expertise they use to strengthen our industry-leading Managed Detection and Response (MDR) service and defend customers against evolving AI-era threats. A 20% growth forecast for cybersecurity talent sounds significant. I believe it understates what we are going to see in Incident Response. The U.S.
Read Post
nightfall

How Nightfall Blocks Data Exfiltration in Milliseconds

Oct 20, 2026 By Amit Nene In Nightfall
Blocking an exfiltration means deciding, in the moment, whether the data leaving a device is sensitive. That turns a detection platform built for accuracy and scale into one that must also answer in milliseconds. Nightfall pioneered the AI-first approach to DLP. Instead of leaning on regular expressions and pattern matching alone, we use language-aware machine learning models that understand the context sensitive data appears in.
Read Post
1Password

SaaS access governance: Does access end when employees leave?

Oct 20, 2026 By Stephanie Torto In 1Password
Cybersecurity Awareness Month encourages organizations to examine the controls behind everyday security habits. Training helps employees spot phishing and use strong authentication but does not resolve gaps in systems that govern access. Many organizations manage employee access through an identity provider (IdP) and single sign-on (SSO). However, not every AI or SaaS application connects to those systems.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.