Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

wallarm

7 Reasons to Get Certified in API Security

Jan 12, 2026 By Wallarm In Wallarm
API security is becoming more important by the day and skilled practitioners are in high demand. Now’s the time to level up your API security skillset. Wallarm University, our free training course, provides security analysts, engineers, and practitioners with hands-on skills you can’t get from documentation, videos, or traditional courses. Run real attacks, investigate real signals, and learn exactly how to defend API environments when it counts. Here are the 7 reasons you should register.
Read Post
kovrr

Quantified Cyber Risk Through an ERM Lens in NIST IR 8286 Rev. 1

Jan 12, 2026 By Kovrr In Kovrr
Lack of data has rarely been a challenge that cybersecurity leaders in the enterprise setting have faced. In fact, cyber risk data is usually in abundance. The obstacle, thus, is instead twofold. Teams must first make sense of all of that information, and leadership must then be able to communicate what it means in a language that supports high-level decision-making. That gap between information and deeper understanding is where many cyber risk programs flounder.
Read Post
cyberhaven

DSPM for AI: Securing Data in the Age of Artificial Intelligence

Jan 12, 2026 By Wil Tranchell In Cyberhaven
Organizations across industries are adopting AI at a rapid pace. From utilizing this newer technology to process data and conduct business-critical tasks to individual employees experimenting with Gen-AI to enhance their workflows, artificial intelligence now touches multiple points of an organization's operations.
Read Post
sentrium

Critical jsPDF Vulnerability Enables Arbitrary File Read in Node.js (CVE-2025-68428)

Jan 12, 2026 By Theklis Stefani In Sentrium
In January 2026, a critical security vulnerability was disclosed in jsPDF, a popular JavaScript library used to generate PDF documents. The issue, tracked as CVE-2025-68428, affects server-side Node.js deployments of jsPDF prior to version 4.0.0 and has been assigned a CVSS score of 9.2. The vulnerability is a path traversal issue that can be abused to read arbitrary files from the local filesystem.
Read Post
cultureai

AI 2026: A Look Ahead

Jan 12, 2026 By Oliver Simonnet In CultureAI
2026, the perfect time to reflect on how far technology has come and what lies ahead. Without a doubt, Artificial intelligence has gone from a niche to an omnipresent force, reshaping how we work, build, and defend. While organisations have speed-ran the adoption of AI and machine learning, cybercriminals have been just as fast to exploit them, and AI now powers business decisions, customer interactions, and – predictably – cyberattacks.
Read Post

The Silent Killer in Security Stacks: Configuration Drift | Todd Graham x Garrett Hamilton

Jan 12, 2026 By Reach Security In Reach Security
The silent killer in modern security programs? Garrett Hamilton and Todd Graham discuss how the real killer is settings quietly slipping out of alignment over time — even in environments packed with “best-in-class” tools and clean audit results. Misconfigurations don’t announce themselves. They accumulate. They age. They slowly pull your security posture away from original intent. What teams think is “turned on” often isn’t enforced consistently — or at all. Without continuous validation, drift becomes invisible risk.
View Video
vanta

How to choose the best regulatory compliance software: A buyer's guide

Jan 12, 2026 By Vanta In Vanta
With regulations evolving faster than ever due to new technologies, emerging threats, and global market trends, maintaining the expected compliance posture is becoming increasingly complex and time-consuming. ‍ Today, many organizations struggle to update systems and processes in response to regulatory changes, all while maintaining core business activities.
Read Post

PGA of America Trusts LevelBlue as Official Cybersecurity Advisor

Jan 12, 2026 By LevelBlue In LevelBlue
LevelBlue and the PGA of America share a commitment to excellence under pressure. As the Official Cybersecurity Advisor of the PGA of America, LevelBlue brings championship standards of protection, continuity, and trust to the organizations that keep the game - and business - moving forward. From fairways to firewalls, LevelBlue safeguards mission-critical operations, member data, and high-profile events with always-on defense, accelerated response, and expert-led security operations powered by AI-driven threat intelligence.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.