Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Corelight

You can't govern what you can't see: Detecting shadow AI on your network

Jul 22, 2026 By Tim Chiu In Corelight
AI adoption inside the enterprise didn't ask for permission. It arrived through browser tabs, code editors, and meeting transcription bots, quietly stitching itself into daily workflows long before security teams could write policy around it. The result is a familiar story with a new villain, a sprawling, unmanaged attack surface that lives in your network traffic but nowhere in your asset inventory. We call it shadow AI, and it's the blind spot you didn't plan for or budget for.
Read Post

Why Your Healthcare RAG Pipeline Is Leaking PHI (And How to Fix It)

Jul 22, 2026 By Protecto In Protecto
Why Your Healthcare RAG Pipeline Is Leaking PHI Most healthcare organizations believe their AI assistant is secure once they restrict who can log in. Unfortunately, that's only part of the story. Modern healthcare AI applications rely on Retrieval-Augmented Generation (RAG), where patient records, physician notes, insurance claims, and medical documents are embedded into vector databases to power intelligent search.
View Video
reach security

The Missing Layer in Network Security: Continuous Assurance

Jul 22, 2026 By Garrett Hamilton In Reach Security
Some of the most serious network security weaknesses develop gradually through routine operational changes. Firewall rules are adjusted to support business needs, exceptions remain in place longer than planned, and controls are modified during troubleshooting. Over time, those decisions can push the live environment away from the security posture the organization believes it has.
Read Post
reach security

Protecting the Corporate Nervous System: Why Network Security Assurance Is Becoming a Security Imperative

Jul 22, 2026 By Bharath Rangamannar In Reach Security
Modern enterprises depend on a complex network of interconnected systems, applications, identities, and security controls. This infrastructure has become the nervous system of the business, enabling critical operations, supporting applications, and enforcing the boundaries that protect sensitive data. When these systems function correctly, they become invisible.
Read Post
Arctic Wolf

What the OpenAI-Hugging Face Incident Really Tells Us

Jul 22, 2026 By Laura Grace Ellis In Arctic Wolf
For years, the conversation about AI in cybersecurity has been mostly hypothetical. What happens when a model can plan and execute an attack on its own? How far away is that, really? This week, OpenAI gave us a concrete answer, and it arrived earlier than many expected. The incident is a genuine milestone, and it deserves the attention it is getting. But the most useful response is disciplined execution on the fundamentals, at a pace that matches the moment.
Read Post
appsentinels

The Abbott Cyber Incident Reveals Why Infrastructure Security Is No Longer Enough for Healthcare

Jul 22, 2026 By AppSentinels In AppSentinels
Healthcare has spent years strengthening its infrastructure against ransomware, patching vulnerabilities, deploying endpoint detection, and implementing zero-trust architectures. Yet, attackers continue to find new ways to compromise healthcare organizations.
Read Post
knowbe4

Attackers Exploit AI Hallucinations to Send Users to Phishing Sites

Jul 22, 2026 By KnowBe4 Team In KnowBe4
Threat actors are using a new technique called “phantom squatting” to trick AI tools into directing users to phishing sites, according to researchers at Palo Alto Networks’ Unit 42. Since AI models frequently hallucinate phony information, they sometimes point users to websites that don’t exist. Threat actors are now registering these AI-hallucinated domains and using them to host phishing sites.
Read Post

Ep. 68 - Why OWASP's AIVSS Scores Agentic AI at Maximum Risk

Jul 22, 2026 By SafeBreach In SafeBreach
OWASP just shipped AIVSS — an entirely new vulnerability scoring methodology built for autonomous AI agents, where a compromised orchestrator can score a perfect 10. Host Tova Dvorin and Adrian break down the "amplification principle": why a 2.1 CVSS finding becomes a 7.1 in the wrong agent, how persistent memory and broad tool access expand every blast radius, and what EchoLeak-style attacks already mean for real deployments. Plus where adversarial exposure validation and SafeBreach's agentic AI coverage fit in.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.