Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Start Where You Are: Resilience in Healthcare Begins With Action

Jan 14, 2026 By Rubrik In Rubrik
In this episode of Building Cyber Resilience: A Healthcare Leader’s Guide, Josh Howell, Healthcare CTO at Rubrik, sits down with Heather Costa, Director of Technology Resilience at Mayo Clinic and Vice President at WiCyS Healthcare. Heather breaks down what it takes to build real resilience inside complex healthcare systems where downtime carries human consequences. She shares practical frameworks for prioritization, overcoming analysis paralysis, and aligning leadership around what matters when every minute counts.
View Video
levelblue

Identity & Beyond: 2026 Incident Response Predictions

Jan 14, 2026 By Jamie Mamroe In LevelBlue
In 2026, incident response (IR) will continue its shift away from traditional malware-centric investigations toward identity-driven intrusions, abuse of trusted cloud services, and low-signal, high-impact activity that blends seamlessly into normal business operations. Rather than relying on technical exploits, threat actors are prioritizing legitimate access, persistence, and operational efficiency, enabling them to evade users, security controls, and automated detection.
Read Post
salt security

Beyond Testing: API Security as the Foundational Intelligence for an 'industry leader'-Level Security Strategy

Jan 14, 2026 By Eric Schwake In Salt Security
In today's security landscape, it's easy to get lost in a sea of acronyms. But one layer has become the undisputed foundation for modern application security: API security. Why? Because APIs are no longer just part of the application, they are the application. They are the connective tissue for microservices, third-party data, and the explosive new 'Agentic AI Action Layer' powered by protocols like MCP (Model Context Protocol). Securing the application is securing the APIs.
Read Post
bitsight

A Day Without ICS: The Overlooked ICS Risks That Could Bring Operations to a Halt

Jan 14, 2026 By Emma Stevens In BitSight
Have you ever watched AMC’s The Walking Dead? Before the walkers, before the chaos, there is a quieter moment that often goes unnoticed. The power is out. Roads are empty. Hospitals are running on borrowed time. The world has not fallen apart yet, but it is no longer working. That is what a day without ICS and OT would look like. Industrial control systems (ICS) and operational technology (OT) are the systems that run the physical world.
Read Post
armo

See the Attack Before It Lands: What the ARMO-Rapid7 Partnership Unlocks

Jan 14, 2026 By Shauli Rozen In ARMO
The ARMO-Rapid7 partnership connects broad attack surface coverage with deep cloud and Kubernetes runtime security and visibility. By correlating exposures with real workload behavior, organizations can identify meaningful risk earlier, focus remediation where it matters most, and respond to active threats with precision, improving security outcomes while operating more efficiently in cloud-native environments.
Read Post
Razorthorn

Passwordless Authentication: The Future of Identity Security

Jan 14, 2026 By Razorthorn In Razorthorn
Passwords were invented in the 1960s. Six decades later, we’re still using them to protect everything from email accounts to bank transfers to corporate networks. The problem isn’t just that they’re old technology, it’s that they were never designed for the world we live in now.
Read Post
knowbe4

Report: Microsoft Was the Most Impersonated Brand in Q4 2025

Jan 14, 2026 By KnowBe4 Team In KnowBe4
Microsoft was the most commonly impersonated brand in phishing attacks during the fourth quarter of 2025, according to researchers at Guardio. Microsoft was followed by Facebook, Roblox, McAfee, Steam, AT&T, Amazon, Google, Yahoo, and Coinbase. “Scammers ramped up brand impersonation attacks throughout Q4 2025, timing their campaigns around when people are busiest online, shopping for deals, renewing subscriptions, or looking for jobs,” Guardio says.
Read Post
knowbe4

Phishing Campaign Abuses Google's Infrastructure to Bypass Defenses

Jan 14, 2026 By KnowBe4 Team In KnowBe4
Researchers at RavenMail warn that a major phishing campaign targeted more than 3,000 organizations last month, primarily in the manufacturing industry. The phishing messages posed as legitimate business notifications, such as file access requests or voicemail alerts, and were designed to send users to credential-harvesting login pages. Notably, the campaign abused legitimate Google infrastructure and links to avoid being flagged by security tools.
Read Post
astra

Understanding the API Security Maturity Model

Jan 14, 2026 By Rishabh Goyal In Astra
As per Traceable’s 2025 State of API Security report, only 21% of the >1500 respondents surveyed across the globe showed confidence in detecting attacks at the API layer. Furthermore, only 13% were capable of preventing >50% of API attacks. This is when the API sprawl is still burgeoning. The challenge, thus, is no longer volume but maturity.
Read Post
Snyk

ServiceNow's Virtual Agent Vulnerability Shows Why AI Security Needs Traditional AppSec Foundations

Jan 14, 2026 By Stephen Thoemmes In Snyk
The recent disclosure of what security researchers are calling "the most severe AI-driven vulnerability uncovered to date" in ServiceNow's platform serves as a stark reminder: securing agentic AI isn't just about new AI-specific controls; it requires getting the fundamentals right first.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.