Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

manageengine

Exploit Wednesday: The blind spot in your Patch Tuesday routine

Nov 4, 2026 By Mahanya V In ManageEngine
On Patch Tuesday in January 2023, Microsoft fixed a privilege escalation flaw in afd.sys, the Windows driver behind the Winsock networking interface. Two IBM X-Force researchers who had never worked with that driver compared the old and new versions of the file and had a working exploit for Windows 11 in about a day. China's 360 IceSword Lab later reported finding the same flaw already exploited in the wild that month.
Read Post
manageengine

PHP2Shell mitigation: Applying the PHP workaround with Endpoint Central

Nov 4, 2026 By Manish from ManageEngine In ManageEngine
On October 21, 2026, PHP fixed two critical unauthenticated remote code execution flaws, CVE-2026-109618 and CVE-2026-109619. CISA added both to its Known Exploited Vulnerabilities catalog on October 26th. The real fix is upgrading PHP and restarting every worker process. But many Windows servers can’t do that yet: the vendor hasn’t certified the new version, the PHP branch is end-of-life, or nobody knows whether a PHP copy exists inside an old application.
Read Post
manageengine

Why most security training fails and how behavioral science can fix it

Nov 3, 2026 By Omar Hafiz In ManageEngine
We need to face a bitter truth: Most security awareness training out there just doesn’t work the way it’s supposed to. Year after year, companies worldwide pour billions into all sorts of training programs, posters, and click-through modules, yet phishing click incident rates stubbornly persist with no sign of them fading away any time soon. So, what are we missing? According to Verizon’s Data Breach Investigations Report, the human element is involved in 62% of breaches.
Read Post
manageengine

DHCP Fingerprinting in Windows: Applying Smarter DHCP Policies for Device Profiling with DDI Central

Nov 2, 2026 By [email protected] In ManageEngine
Enterprise networks host a variety of devices, from workstations and VoIP phones to printers and IoT devices. Each group may have different network configuration requirements, making it increasingly difficult to maintain consistent settings as the network grows. Microsoft DHCP policies help address this challenge by evaluating attributes in DHCP requests and applying configurations based on defined conditions.
Read Post
manageengine

6 must-haves in a remote patching solution

Oct 28, 2026 By Mahanya V In ManageEngine
Somewhere in your fleet sits a laptop with a pristine, 100% compliance score. Not because it’s running the latest patches, but because it hasn’t talked to the server in three weeks, and a device that never checks in can’t exactly fail an audit, right? IT teams now manage more endpoints outside the office than inside it.
Read Post
manageengine

Your device has been trying to tell your ticket what's wrong-Endpoint Central's extension finally lets it

Oct 28, 2026 By Raghav S In ManageEngine
Imagine that your device data and ticket live in two separate rooms within the same building. Your device already has the performance metrics needed to explain the problem—yet, just to make sense of the ticket, your help desk tech still has to walk into the first room, find the data, and carry it back to the ticket room for analysis. This journey, repeated across every single ticket, is what’s quietly costing your IT team.
Read Post
manageengine

ClickFix: How a fake CAPTCHA becomes a malware delivery mechanism

Oct 27, 2026 By Judin Joan Soundarya In ManageEngine
CAPTCHAs are designed to distinguish humans from automated systems. A user types distorted letters or clicks a few crosswalks, and in doing so proves there is a human behind the keyboard rather than a script. The whole idea rests on one assumption: A human, unlike a bot, will pause and think for a moment before acting. ClickFix takes that assumption and turns it into the attack itself. The fake verification screen does not ask the user to prove they are human by thinking.
Read Post

Everything you need to stay ahead of the 47-day SSL/TLS certificate validity mandate

Oct 23, 2026 By ManageEngine In ManageEngine
Phase one of the CA/Browser Forum's reduced certificate validity mandate is already live. By March 2029, public CA certificate renewal frequencies will be up to eight times higher. The mandate effectively sets a minimum bar for certificate management. You need full visibility into every certificate in your environment, automatic renewal workflows that can handle a much higher frequency without manual effort, and deployment that gets the renewed certificate live at the target server along with the necessary post-deployment actions. ManageEngine Key Manager Plus covers all three of these facets.
View Video
manageengine

AI threat detection: From reactive alerts to proactive defense

Oct 22, 2026 By Sisupang S In ManageEngine
A suspicious login, an unexpected privilege change, and a surge in file downloads may reach your security team as separate alerts. Understanding whether they belong to the same attack requires context. For your IT and security operations teams, connecting these signals takes time. If you're a CIO or CTO, that delay can increase your exposure to operational disruption and data loss. AI threat detection helps you analyze security activity, identify suspicious patterns, and prioritize investigations.
Read Post
manageengine

5 AI scams that look legitimate in 2026 and the clues most people miss

Oct 22, 2026 By Priyanka Gs In ManageEngine
Top Tips is a weekly column where we explore practical ways to make technology work better for you. From improving productivity and strengthening digital security to discovering smarter ways to use everyday tools, we share simple, actionable insights to help you navigate the ever-evolving world of technology with confidence. AI is making online scams harder to recognize. From fake government announcements to convincing video calls, fraudsters are using synthetic content to exploit trust.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.