Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

WatchGuard

More Vulnerabilities Are Being Found Than Ever Before. That's Good News.

Sep 16, 2026 By Tracy Hillstrom In WatchGuard
If you've glanced at a vulnerability tracker lately, the numbers look alarming. The Forum of Incident Response and Security Teams (FIRST) now projects roughly 66,000 CVEs will be published in 2026; up from a February forecast of 59,427 and closing in on 70,000 by some counts. That would follow a record 2025, which finished at roughly 48,000 disclosed CVEs, itself a sharp climb from about 40,000 the year before. It's tempting to read that curve as a sign that software is getting worse. It isn't.
Read Post
upguard

Best Dark Web Monitoring Services for Business

Sep 16, 2026 By Lance Turner In UpGuard
Most security stacks still find out about stolen credentials the hard way: when an attacker logs in with them. Sometimes the first warning sign is a customer complaint or a call from law enforcement. Dark web monitoring services for business close that gap by watching underground sources for any exposure tied to your domains, employees, code, and brand, so you can reset access before someone else gets there first.
Read Post
cycognito

Emerging Threat: (CVE-2026-70756) Oracle WebLogic Server Takeover via T3 and IIOP

Sep 16, 2026 By Igal Zeifman In CyCognito
CVE-2026-70756 is a vulnerability in the Core component of Oracle WebLogic Server, part of Oracle Fusion Middleware. An unauthenticated attacker with network access over the T3 or IIOP protocols can compromise the server and take full control of it. The vulnerability carries a CVSS v3.1 base score of 9.8 (Critical). Oracle rates it as easily exploitable, with no privileges and no user interaction required. Confidentiality, integrity, and availability impacts are all rated high.
Read Post
elastic

CISA's Logging Reference Architecture for OMB M-26-14: What federal agencies should do next

Sep 16, 2026 By Woody Walton In Elastic
On August 20, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) published its Logging Reference Architecture (LRA), the implementation guidance federal civilian executive branch (FCEB) agencies have been waiting for since the Office of Management and Budget's Memorandum M-26-14 reset the requirements for enterprise logging.
Read Post
knowbe4

Alert: AI is Accelerating Targeted Social Engineering Attacks

Sep 16, 2026 By KnowBe4 Team In KnowBe4
AI tools are drastically improving the speed of the reconnaissance stage of targeted social engineering attacks, according to researchers at ESET. Attackers can use these tools to trawl the internet for publicly available information about potential victims, and incorporate this information into personalized spear phishing attacks.
Read Post

Research - From Square Root to /root: Escalating Privileges in Azure Containers with Python in Excel

Sep 16, 2026 By SafeBreach In SafeBreach
Isolation is not the same thing as security. Ron Ben Yizhak from SafeBreach Labs presented this research at Black Hat USA and DEF CON: when Microsoft shipped Python in Excel, the code didn't run on a machine. It ran in an isolated container in Azure. So he asked the obvious question. How isolated is it, really? An isolated environment still has an attack surface. It just moves. See how Ron: If your teams are evaluating cloud-executed code features, this one is worth the full read—the methodology matters as much as the findings.
View Video

Tanium Scan Engine 7.0, "Better, Faster, Stronger": Tanium Tech Talks #170

Sep 16, 2026 By Tanium In Tanium
Vulnerability and compliance scans just got faster with Tanium's new scan engine. Today we're digging into Tanium Scan Engine 7.0, a rebuild of Comply scanning that moves enumeration onto Tanium Index instead of scanning live every time. The result: faster scans, lower resource usage, and one less dependency to worry about (goodbye, JRE!!).
View Video

Copyright © 2026 OpsMatters™. All rights reserved.