Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Black Hat FOMO? Dojo AI Demo

Jul 28, 2026 By Sumo Logic, Inc. In Sumo Logic
On this episode of Masters of Data, we take you inside the Dojo AI demo we're bringing to the show floor at Black Hat. We walk through the SOC Analyst Agent, Mobot, and MCP back to back. SOC Analyst Agent triages every tier one alert down to the one that actually matters, and Mobot picks up from there, running the investigation in plain English to track down other phishing victims and lateral movement. We also show how MCP pulls that same insight into Claude or Slack. SOC leads tired of alert fatigue and analyst burnout will want the numbers here: 100% of tier one alerts triaged automatically, and 25 hours a week back per person.
View Video
tigera

MCP's Auth Hardening: What the Six New OAuth SEPs Fix, and What They Still Don't

Jul 28, 2026 By Alister Baroi In Tigera
In short, the MCP 2026-07-28 release candidate is getting attention for going stateless. The quieter story is a package of six SEPs that harden the protocol’s OAuth layer: issuer validation, credential binding, client type declaration, and cleanups around refresh tokens, scopes, and discovery. All six are worth shipping, and all six fix real failure modes. But they harden how a client authenticates to a server, and that was never the whole problem.
Read Post
1Password

1Password Credential Broker is now in public preview

Jul 28, 2026 By Jeff Malnick In 1Password
Every security team has tried to trace a credential access event back to a specific workload, and received nothing but a "service account." That service account probably had access to an entire vault, and its audit trail doesn’t tell you which repo triggered the request, which specific credential was accessed, or whether the workflow still has access. When an auditor asks, or an incident occurs, that's not a good place to be.
Read Post
UTMStack

Compliance Automation Software: A Practical Guide for 2026

Jul 28, 2026 By cesmng In UTMStack
You're staring at a spreadsheet full of screenshots, exported CSVs, and half-finished owner assignments, while the auditor wants one clean answer to a simple question, can you prove the control worked when it mattered? That's the gap compliance automation software is built to close in security programs that can't afford guesswork, especially when logs, cloud settings, identity events, and policy evidence all live in different places.
Read Post
levelblue

Day in the Life of DFIR Leader: Bringing Order to Cyber Chaos

Jul 28, 2026 By Devon Ackerman In LevelBlue
Most cyber investigations don’t begin at the beginning. Rather, they begin at the end, after systems are locked, data is exposed, and operations have already been disrupted. The outcome is visible, but the cause is not. From there, everything becomes a process of working backward on an incomplete picture. That’s the unique puzzle that keeps Devon Ackerman, Global Services Leader of Digital Forensics and Incident Response (DFIR) firmly planted in the world of chaos every day.
Read Post
mend

Move faster than AI-driven risk: Inside Mend.io's latest AI application security update

Jul 28, 2026 By Asaf Saar In Mend
AI didn’t just change how fast you ship. It changed what your AI application security program has to protect. Two years ago, security teams protected code, open source, and containers. Today they also have to protect AI agents, MCP servers, models, prompts, and runtime interactions, configured or deployed faster than any team can manually review. The attack surface didn’t grow. It exploded.
Read Post
astra

AI Pentesting vs Traditional Pentesting: A Comparison, Cost, and Coverage Breakdown

Jul 28, 2026 By Niharika Mahesh In Astra
If there’s one thing all of us can agree about modern security, it is that penetration testing is no longer a once-a-year activity. Modern attack surfaces do not stay still. New code ships faster, cloud infrastructure is constantly changing, and APIs are multiplying across product ecosystems. To keep up, engineering teams have moved security earlier in the development lifecycle through shift-left practices.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.