Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Ep. 85 - FortiBleed: The Campaign With No CVE That Locks You Out of Your Own Firewall

Oct 9, 2026 By SafeBreach In SafeBreach
The FBI and US Secret Service just dropped joint advisory JCSA 2026-1601 on FortiBleed—and there is no CVE to patch. Tova Dvorin and Adrian Culley walk the full chain: credential stuffing against internet-facing FortiGate SSL VPNs, legacy SHA-256 admin hashes cracked on rented GPUs, fake vendor-style admin accounts, and attackers deleting your accounts to lock you out of your own firewall. Plus the INC/Lynx ransomware link, what the 86,000 figure really means, and the question that matters: would a new admin on your edge device at 3am fire anything?
View Video

One Identity: Governing Every Identity - Human, Machine, and AI

Oct 9, 2026 By One Identity In One Identity
Every enterprise runs on identity — and machines and AI agents now outnumber people in many environments. This 2-minute overview covers why identity has become a board-level priority, and how One Identity governs every identity — human, machine, and AI agent — on one unified platform. Validated by Omdia: 150% ROI, go-live in as little as one day, zero-touch onboarding.
View Video
ignyte Team

FedRAMP Class B vs Class C: Which Should You Pursue?

Oct 9, 2026 By Dan Page In Ignyte
In the past, FedRAMP has used impact levels as a sort of classification system for cloud services that wish to work with the government in some capacity. The impact levels evaluate a cloud service provider (CSP) based on the sort of information they would be handling and the service they would provide to the government. They are classified across three axes: confidentiality, integrity, and availability.
Read Post
threatspike

How Much Does An MSP Cost? A Real Breakdown Of Outsourced IT Support Costs

Oct 9, 2026 By Joey Wright In ThreatSpike
When you are comparing managed service providers (MSPs), a monthly price per user is a useful starting point, but it rarely tells the whole story. If you take for example, a standard SME business with 25 employees, they could be charged anywhere between £9000-45,000 per year for outsourced IT support, before a single extra is added. That’s the varied range most MSPs will quote for per-user fees and on its own, tells you less than it seems to.
Read Post
miniorange

Why OAuth SSO Matters for Both Jira Cloud and Jira Service Management

Oct 9, 2026 By Chinmay Rasam In miniOrange
Jira is rarely used by just one type of user. Primarily, teams use Jira Cloud for project management. At the same time, support teams work inside Jira Service Management (JSM), while internal employees and external users such as customers, vendors, and partners may access the JSM portal. They are all accessing the same Atlassian ecosystem, but they do not necessarily log in the same way. This is where organizations can run into a problem.
Read Post
miniorange

Hybrid Identity Management: Secure Access Across Cloud and On-Premises

Oct 9, 2026 By Minal Purwar In miniOrange
Hybrid identity management is the practice of managing user identities and access across on-premises and cloud environments through a connected identity framework. Most organizations today operate across both. Active Directory may still manage identities for internal applications, while cloud platforms and SaaS applications handle other parts of the business. This creates a simple challenge: how do you give users consistent access when their applications and identities exist in different environments?
Read Post
cyberhaven

Not All Lineage Is the Same

Oct 9, 2026 By Nishant Doshi In Cyberhaven
Data lineage is fast becoming one of the most important ways to understand data exfiltration, for both human and agentic workflows. More and more vendors now market data lineage, each claiming their approach is superior. That makes us proud parents: what was once an esoteric technology is finally going mainstream. Cyberhaven pioneered data lineage in data security and has spent years perfecting it.
Read Post
Corelight

Hunting Citrix NetScaler zero-days with Corelight: Part 2

Oct 9, 2026 By Deepali Prasad In Corelight
In Hunting Citrix NetScaler zero-days with Corelight, we explored how network evidence from Corelight’s Open Network Detection and Response (NDR) Platform can help identify candidate NetScaler appliances, observe DTLS use and hunt for suspicious activity.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.