Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

netwrix

You wish you were passwordless. But you're not.

May 7, 2026 By Grady Summers In Netwrix
It’s World Password Day again. Time for the reminders: update your passwords, make them longer, don’t reuse them. All good advice. But it misses something. Most of us don’t actually want passwords. We want them gone—replaced by something cleaner, invisible, safer by design. Passkeys, biometrics, devices that just know it’s you. That’s the direction, and it’s a good one. But here’s the part we don’t say out loud: we’re not there yet.
Read Post
netwrix

You still have passwords. Now enforce them.

May 7, 2026 By Jeremy Moskowitz In Netwrix
So you still have passwords. Good to admit it, now let’s deal with them. The interesting problem isn’t whether passwords should exist. We know they shouldn’t. The practical problem, the one you’re living with every day, is what happens while your organization still does have them, on your endpoints, in every corner of your environment. Most organizations already have some form of password policy.
Read Post
sentrium

Penetration testing vs vulnerability assessment: What's the difference?

May 7, 2026 By Adam King In Sentrium
Understanding the difference between penetration testing and vulnerability assessment is an important part of building an effective security programme. While the terms are often used interchangeably, they serve distinct purposes and provide different types of insight into an organisation’s risk profile. For technology-led organisations, particularly those operating complex SaaS platforms or cloud environments, both approaches have a role to play.
Read Post

Are You Behind on Patching? | CISA KEV vs. Third-Party KEVs

May 7, 2026 By Seemplicity In Seemplicity
Are you relying solely on the CISA KEV list for your vulnerability management? You might already be behind. In this video, Rob Babb, Exposure Management Strategist at Seemplicity, discusses why waiting for a vulnerability to appear on the CISA KEV list can leave your organization exposed for weeks. In this video, you’ll learn: It's time to break the cycle of technical debt. Learn more at: seemplicity.ai.
View Video
mend

Mend.io and GitHub Partner to Bring Mend Renovate Cloud to Open Source Maintainers

May 7, 2026 By Jamie Tanna In Mend
At Mend.io, we understand better than some the weight that sits atop the shoulders of open source maintainers who support the ecosystem at large. These maintainers need to keep on top of supply chain security best practices, keep their dependencies up-to-date, taking on new contributions from users, all the while trying to squeeze that into their “off hours”.
Read Post

AI: The hero's journey with Ken Westin

May 7, 2026 By LimaCharlie In LimaCharlie
Join us for this week's Defender Fridays as Ken Westin, Senior Solutions Engineer at LimaCharlie, shares his AI journey and what the hero's journey framework reveals about how security professionals can move from hesitation to genuine mastery of AI tools. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.
View Video

Breaking the Cycle of Technical Debt with Agentic Exposure Management

May 7, 2026 By Seemplicity In Seemplicity
In this video, Rob Babb, Exposure Management Strategist at Seemplicity, shares key insights from a presentation at ISACA Atlanta’s Geek Week regarding breaking the cycle of technical debt through agentic exposure management. The discussion focuses on why standard scoring methods like CVSS are often insufficient on their own for effective vulnerability prioritization.12 Key Topics Covered: For more information on agentic exposure management, visit: seemplicity.ai.
View Video
cyberhaven

Agentic AI Security: Visibility and Control for AI Agents at Work

May 7, 2026 By Kasi Annamalai In Cyberhaven
Security teams have spent years tracking what employees do with data. The harder problem now is tracking what agents do on their behalf. AI agents, whether running in an IDE, installed locally on a laptop, or connected to internal data through a model context protocol (MCP) server, operate with the permissions of the user who deployed them. They read files, query databases, call external APIs, and generate outputs. And in most enterprise environments, security teams have no reliable way to see any of it.
Read Post
acronis

Simplifying industrial cybersecurity in a time of rising risk

May 7, 2026 By Lee Pender In Acronis
Manufacturers face a trio of converging challenges: Cyberthreats are escalating, regulations are tightening, and operational environments are becoming more complex. The traditional approach to operational technology (OT) security is no longer working. Manufacturers need to respond by moving toward platform-based cybersecurity to reduce risk and improve resilience. An ARC Advisory Group report published in April 2026 provides details.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.