Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Internxt

How to Migrate from Google Drive to OneDrive: 3 Easy Steps

Nov 9, 2026 By Nathan James Turner In Internxt
This article offers the main methods to migrate data from Google Drive to OneDrive via Google Takeout, manual uploads and downloads, or third-party tools. We will also cover things you need to consider when transferring files from Google Drive to OneDrive, including file conversion and backups. Finally, if you’re looking to move files from Google Drive and OneDrive to a cloud storage with zero-knowledge encryption, we will also cover what steps to take in this article, too.
Read Post
1Password

Scaling security reviews at 1Password: Adding an agentic pipeline stage (safely)

Nov 9, 2026 By Megan Barker In 1Password
In our first blog post, we introduced SAGE, our AI-assisted security code reviewer. In our second post, SuperSAGE (SAGE v2) gained context through scaffolding and consistency via the Go harness, so it could reason about the code around the diffs it reviews. The result? SAGE understands the 1Password codebase.
Read Post
Zenity

You Can't Secure the Homegrown AI Agents You Don't Know You Have

Nov 9, 2026 By Dan Levy In Zenity
Ask a security team how many homegrown AI agents the organization runs, and the room usually goes quiet. Engineering teams are building agents on AWS Bedrock, Azure AI Foundry, Google Vertex AI, and open-source frameworks faster than security can catalog them. Many of those agents read sensitive data, call tools and APIs, and act autonomously with little oversight.
Read Post

Ep. 93 - ARTEX: The AI Attack Agents Told to Find the Machines Your EDR Doesn't Cover

Nov 9, 2026 By SafeBreach In SafeBreach
ARTEX is a free, open-source AI attack framework. China-nexus Vapor Panda used it against more than 200 organizations, and Censys has since found 1,465 ARTEX consoles exposed on the internet. We unpack how ARTEX’s planner and worker agents chained years-old keys, an unsigned SAML assertion and cloud metadata abuse, why Microsoft’s Storm-0940 is a separate actor using the same tool, and what to hunt for: sub-threshold password sprays, machine-speed cloud enumeration and DLL side-loading.
View Video
vanta

How to assess data processors for privacy compliance

Nov 9, 2026 By Vanta In Vanta
Accelerating security solutions for small businesses‍ Tagore offers strategic services to small businesses. A partnership that can scale‍ Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate. Standing out from competitors‍ Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.
Read Post
vanta

Vanta + Pillar: The System of Runtime Action for AI Governance

Nov 9, 2026 By Vanta In Vanta
Accelerating security solutions for small businesses‍ Tagore offers strategic services to small businesses. A partnership that can scale‍ Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate. Standing out from competitors‍ Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.
Read Post
reach security

Bring Reach Compensating Controls into ServiceNow Exposure Management

Nov 9, 2026 By Garrett Hamilton In Reach Security
Exposure management starts with reachability. Can an attacker reach the vulnerable service? If so, what protection applies along that path, and what can the team change now? Those questions turn a critical PHP2Shell finding into a practical prioritization and mitigation decision. Reach’s new app for ServiceNow Unified Security Exposure Management (USEM) brings current and achievable protection assessments and mitigation recommendations into the vulnerable-item workflow.
Read Post
certkit

How eMudhra, TWCA, and GoDaddy incidents compare against other CAs

Nov 9, 2026 By Todd H. Gardner In CertKit
Three CAs had very different bad weeks this fall. eMudhra lost a root and quit. GoDaddy had to replace 403,643 certificates over a policy document. TWCA revoked 82% of its certificates over serial numbers. TWCA and eMudhra both failed from a lack of randomness. eMudhra’s private keys had so little that anyone could compute them. TWCA’s CA certificates have serial numbers with 24 random bits where the rules require 64.
Read Post
datadog

Datadog achieves Cyber Essentials Plus certification for its UK operations and UK1 production environment

Nov 9, 2026 By Datadog In Datadog
UK organizations are balancing the need to modernize and scale with growing expectations around supplier security, data governance, and operational resilience. Choosing an observability platform means evaluating not only what it enables teams to see and do but also the platform provider’s own security practices. Datadog has achieved Cyber Essentials Plus (CE+) certification for its UK operations.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.