Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

ARTEX Attack Explained: GitHub secret to Key Vault in 5 minutes

Nov 6, 2026 By GitGuardian In GitGuardian
AI agents are searching public GitHub for leaked secrets, and they move fast. Microsoft Threat Intelligence found agents using ARTEX, an AI framework built for red teams, to go from a GitHub search to stealing data from a company’s Azure Key Vault in five minutes. In this video, we break down what’s happening, why deleting a leaked key doesn’t fix anything, and how to check your company’s exposure today.
View Video
vanta

PIA vs DPIA: Key differences, requirements & when you need each

Nov 6, 2026 By Vanta In Vanta
Accelerating security solutions for small businesses‍ Tagore offers strategic services to small businesses. A partnership that can scale‍ Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate. Standing out from competitors‍ Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.
Read Post
Zenity

Resilience by Design: Architecting Agentic Systems to Fail Safely, Not Catastrophically

Nov 6, 2026 By Gary Hayslip In Zenity
Agentic AI fails differently than traditional software. When a service crashes, alerts trigger, processes restart, and humans intervene. In contrast, an agent encountering a problem continues operating, reasoning past faults, improvising around missing inputs, and proceeding with actions. In these systems, failure redirects execution rather than stopping it. Many AI roadmaps have not yet fully considered this design challenge.
Read Post
sophos

Killing ill-willed skills: Sophos AI at BSides Sydney

Nov 6, 2026 By Younghoo Lee In Sophos
The Sophos AI team presents new research at BSides Sydney On November 7, 2026, Principal Data Scientist Younghoo Lee will present a talk at BSides Sydney entitled "Decode facts, then reason: Detecting obfuscated malicious agent skills with small LLMs." The talk presents a practical hybrid architecture for addressing a distinct software supply chain trust boundary: AI agent ‘skills’ that may be malicious, in contrast to their declared intent.
Read Post
elastic

Scaling cyber protection for US critical infrastructure: How Elastic supports the Community Cyber Resilience Foundation

Nov 6, 2026 By Allison Halataei In Elastic
Over recent years, US critical infrastructure has become a primary target for coordinated cyber attacks. Small water, gas, and electric utilities have faced serious risk from cyber attacks while dealing with limited budgets, staff, and forensic expertise, leaving them further exposed. Advancements in AI have made the cyber threat landscape even more challenging. AI has become an enabler of cyber attacks, rather than a solitary perpetrator.
Read Post
salt security

I Read Gartner's 2026 Hype Cycle for Secure AI. Here Are 7 Takeaways Every CISO Should Know.

Nov 6, 2026 By Roey Eliyahu In Salt Security
Gartner released the Hype Cycle for Secure AI, 2026 on 12 October 2026. I spent some time going through it, and a few things really stood out. The AI security market is exploding with new vendors, categories, and solutions. But the research reinforces something I’ve believed for a long time: Securing AI requires more than protecting the model. You need to understand and protect what AI can actually do.
Read Post
cyjax

Is Threat Intelligence in Your 2027 Cyber Security Budget?

Nov 6, 2026 By Chandni Trehan In CYJAX
Most UK organisations will sign off their April budgets in the next few weeks, and most of that money goes on tools that help them respond to incidents. This post makes the case for also funding intelligence that tells you what’s coming. It explains why more data doesn’t mean more intelligence and sets out three questions good intelligence should answer. It also gives five questions to check your current approach before the budget closes.
Read Post
gitguardian

The Agents Have Now Found Your Secrets On GitHub: ARTEX Is Abusing Public Secrets Right Now

Nov 6, 2026 By Dwayne McDaniel In GitGuardian
Microsoft Threat Intelligence caught attackers using an agentic AI framework, ARTEX, to hunt exposed secrets on public GitHub and move into Azure tenants in as little as five minutes. GitGuardian has tracked this attack path since 2017. Here is what changed, and four things to do today.
Read Post
device authority

The Freezer Hack Was Never About Fridges

Nov 6, 2026 By Paul Lockley In Device Authority
On the night of 11 October, someone switched hundreds of French supermarkets’ freezers into defrost mode and pushed the temperature to 50°C. By Monday morning, staff were opening freezer doors to blasts of hot air, pools of water and spoiled stock. Some stores caught fire. Around 700 food retailers were affected and single stores reported losses of several hundred thousand euros. The timing was no accident either.
Read Post

AI Helped Find Critical PHP Flaws: 4 Things to Do Today

Nov 6, 2026 By Netwrix In Netwrix
AI helped researchers find two critical PHP flaws, and one sat in the code for at least a decade. PHP runs roughly 70% of websites, and attackers were probing on the day the patches shipped, October 21. Dirk Schrader, VP of Security Research at Netwrix, lists four things to do today: update to PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35 and restart the workers; on PHP 8.1 or older, where there’s no official release, use vendor extended support or take the server offline; check your logs and web roots from before the patch; and limit the account PHP runs under.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.