Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

certkit

CertKit Keystore 2.0: private keys encrypted on your own hardware

Nov 11, 2026 By Todd H. Gardner In CertKit
When we shipped the CertKit Keystore in March, it required some admin work from you. Run it on a proper server. Encrypt your backups. Test them. The private keys were yours to protect, as plaintext keys on your disk. Keystore 2.0 makes most of that admin work easier. It’s live now, available on Enterprise plans.
Read Post
datadog

Where to run AWS workloads and how to limit their access

Nov 11, 2026 By Datadog In Datadog
When you’re setting up AWS infrastructure, you need to decide which accounts will host your applications, deployment pipelines, and shared services. AWS Organizations lets you organize workloads and shared services into member accounts based on their ownership, purpose, and isolation requirements. A separate management account handles consolidated billing and administration of the organization.
Read Post
levelblue

From Managed Security to Cyber Resilience: What We Believe the IDC MarketScape 2026 Asia/Pacific MSS Assessment Means for Security Leaders

Nov 11, 2026 By LevelBlue In LevelBlue
Security leaders across Asia/Pacific are being asked to do more than watch alerts. Boards and regulators want proof that the organization can withstand an attack, contain it fast and recover with minimal disruption. That shift, from managed security to cyber resilience, is reshaping what organizations need from a security partner.
Read Post
teleport

Introducing Teleport Beams: A Trusted Runtime for Securing Agents in Production Infrastructure

Nov 11, 2026 By Cassie Breviu In Teleport
Many organizations want to run agentic AI in production, but stay stuck worried that an autonomous agent will go rogue and open up serious infrastructure risk. Teams split into three camps: keep agents away from production entirely, let them run wild and hope for the best, or approve every single action by hand. None of these scale.
Read Post
sophos

Your training data is boring: Anomaly detection with LLMs

Nov 11, 2026 By Ben Gelman In Sophos
The Sophos AI team presents new research on anomaly detection Following on from research presented at Black Hat USA 2025, Sophos data scientists Ben Gelman, Tamas Nyiri, and Tibor Kristóf Lányi recently showcased new work on anomaly detection at BSides Las Vegas 2026. As promised, we’re sharing more details of that research (the recording of the talk is also available here). Supervised classifiers in cybersecurity are often trained on data that doesn't capture the most unusual examples.
Read Post
reach security

Disrupt PHP2Shell Post-Exploitation with CrowdStrike Controls

Nov 11, 2026 By Garrett Hamilton In Reach Security
Key Takeaways: Reachability determines exposure. Two servers with the same PHP2Shell vulnerability can face different levels of risk depending on accessible attack paths and existing protections. CrowdStrike can help disrupt post-exploitation activity. Falcon capabilities can detect or block malicious behaviors, including suspicious processes and command execution, even when a vulnerable service remains reachable. Effective protection depends on configuration.
Read Post
reach security

Don't Let Configuration Drift Reopen PHP2Shell Attack Paths

Nov 11, 2026 By Garrett Hamilton In Reach Security
Key Takeaways: Configuration drift can reopen attack paths. Changes to firewall rules, inspection settings, or endpoint policies can expose vulnerable systems that were previously protected. ‍ Vulnerability exposure changes even when the CVE doesn't. Security teams need to reassess reachability and existing protections as configurations and exploit intelligence evolve. ‍ Reach connects configuration drift to vulnerability exposure.
Read Post
Why Real New Social Accounts Get Mistaken for Fake Ones

Why Real New Social Accounts Get Mistaken for Fake Ones

Nov 11, 2026 By SecuritySenses In SecuritySenses
A real new account gets mistaken for a fake one because it shows the signals people are taught to check: a recent join date, a thin bio, a borrowed-looking photo, few posts and lopsided numbers. Only the join date is out of your hands. Fixing the rest before launch clears most of those flags.
Read Post
Google Workspace Security Audit Providers Compared: Scope, Timelines and Remediation

Google Workspace Security Audit Providers Compared: Scope, Timelines and Remediation

Nov 11, 2026 By SecuritySenses In SecuritySenses
Most Google Workspace tenants drift out of shape over time. Admin roles pile up, sharing defaults stay open, nd third-party apps collect permissions nobody remembers granting. A partner-led security audit is one of the quickest ways to find and close those gaps, but providers differ widely in what they check, how long they take and whether they help fix anything. This guide compares six providers offering Workspace security audits, using details from each provider's own service page. It also covers where automated scanning fits and what to agree in writing before any engagement starts.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.