Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

one identity

How to prevent chaos in the Microsoft AD estate: A quick-start guide to reduce risk and administrative burden in medium-sized regulated businesses

Sep 8, 2026 By andras fekete In One Identity
If you work in IT for a medium-sized regulated business, you already know the truth: Your Microsoft environment didn’t become sprawling overnight. It grew through mergers, acquisitions, divestitures, reorganizations and the natural evolution of a business that’s constantly adapting. Every new business unit brought its own domain. Every acquisition added another tenant. Every project introduced new accounts, groups and privileges.
Read Post
one identity

KuppingerCole names One Identity a leader in non-human identity management (NHIM)

Sep 8, 2026 By Mark Argyle In One Identity
Non-human identity management (NHIM) is the governance and security of machine, application, and service identities through standardized authentication, authorization and lifecycle controls. These identities often have elevated privileges, making them prime targets for exploitation, especially when left unmanaged. Effective NHIM reduces risk, strengthens compliance and ensures operational resilience. KuppingerCole notes:“One Identity solutions address all major NHIs.
Read Post
tanium

Hunt or be Hunted: ShieldBreak Zero-Day

Sep 8, 2026 By HuntIQ Team In Tanium
On August 11, 2026, a security researcher publicly released a proof-of-concept called ShieldBreak, a full bypass of Microsoft’s own July patch (RoguePlanet) for a Windows Defender privilege-escalation flaw, with a reported 100% success rate against Windows 11 25H2 and Windows Server 2025. No vendor fix existed for the bypass. The only real defense was whoever moved first.
Read Post
Tines

What's new in Tines: August 2026 edition

Sep 8, 2026 By Tines In Tines
More teams are building Apps in Tines Stories to deliver their most important work. This month, you can connect Apps to your Tines data, assign clear ownership, and share view access through your identity provider. Bring your data directly into an app. Apps can now read cases, records, and resources through built-in Workbench functions, so you spend less time configuring Workbench tools and building endpoints to interact with your data..
Read Post
foresiet

Magento Zero-Day: Unpatched Adobe Commerce RCE Is Backdooring Online Stores

Sep 8, 2026 By Foresiet In Foresiet
On 4 September 2026, attackers began exploiting an unpatched remote code execution flaw in Magento Open Source and Adobe Commerce. Dutch e-commerce security firm Sansec disclosed the issue on 5 September and named it StyleSmuggler. The company said it published early because stores were being compromised in real time.
Read Post

One Identity CEO talks winning CISO board pitch & identity fabric

Sep 8, 2026 By One Identity In One Identity
Breaches will impact an organization greatly, regardless of industry or your role in it, and Larry Chinski, VP of enterprise strategy, caught up with CEO Praerit Garg to explore the challenges facing CISOs in trying to communicate this fact. Tune in for insights on learning to speak the ROI-focused language of the board when pitching a security budget. And keep watching for a discussion on the benefits behind a comprehensive identity fabric for your identity security.
View Video
veracode

Evaluating Risk Remediation Software for Enterprise Scalability

Sep 8, 2026 By Natalie Tischler In Veracode
Enterprise software delivery is accelerating with more applications, more teams, more pipelines, more third-party code shipping faster than ever. And you can add the compounding risks of AI onto all of that. At the same time, compliance pressure is rising across development, security, and audit teams.
Read Post
Arctic Wolf

CVE-2026-86218: Active Exploitation of N-able N-central: Critical Pre-Auth Remote Code Execution (RCE) Vulnerability

Sep 8, 2026 By Arctic Wolf Labs In Arctic Wolf
A maximum-severity (CVSS 10.0) vulnerability CVE-2026-86218 has been discovered in N-able N-central prior to build 2026.3.1.14. This flaw allows unauthenticated attackers to execute arbitrary code on the N-central server before authentication enabling remote takeover of the platform. The vulnerability is classified as static code injection (consistent with CWE-96) in a public-facing application endpoint.
Read Post
WatchGuard

When Vulnerability Databases Are No Longer Enough

Sep 8, 2026 By Manu Santamaría Delgado In WatchGuard
The NIST’s changes in how the National Vulnerability Database (NVD) operates have fundamentally shifted how organizations interpret the vulnerabilities published in this go-to registry. In the past, the NVD provided vulnerability enrichment data, such as CVSS scores, affected products, CWE classifications, and reference links.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.