Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Corelight

Investigate your network in plain English: introducing Natural Language Query

Sep 25, 2026 By Adam Pumphrey In Corelight
Every SOC analyst has been there. An alert fires. You know what you need to find. Maybe it's all outbound connections from a specific host that spiked overnight. Maybe it's every DNS query over 100 characters from a subnet you're watching. You know the question. What you don't know is the exact query syntax you need to ask it. So you open the documentation. You search for field names. You try a query, get it wrong, adjust, and try again. Minutes pass.
Read Post
Corelight

Post-Quantum Cryptography: The upgrade nobody asked for (but everyone's getting)

Sep 25, 2026 By Josh Porto In Corelight
Post-Quantum Cryptography (PQC) is the security equivalent of showing up at the airport and discovering TSA changed the rules overnight again: Laptops out, laptops in, shoes off, shoes on, and declare your shampoo like it’s contraband uranium. You can argue with the signage, but the plane is still leaving, and compliance is not optional. The good news is you don’t need a physics degree, a quantum computer, or a wellness crystal to deal with it.
Read Post
Corelight

The water system attacks were simple. Securing OT isn't.

Sep 24, 2026 By Paul Mathis In Corelight
Recent cyberattacks against U.S. water and wastewater systems have put some familiar operational technology (OT) security problems back in the headlines. Federal agencies have warned about malicious actors targeting internet-facing programmable logic controllers (PLCs), changing device configurations, and disrupting operations at utilities across multiple states.
Read Post

Episode 24 - Speaking Security So Leaders, Boards, and Buyers Actually Listen

Sep 24, 2026 By Corelight In Corelight
In this episode, Richard Bejtlich talks with Julie Parrish, CMO at Corelight, about how security professionals can communicate more effectively with CISOs, boards, and buyers who each measure success differently. Julie explains why practitioners should frame requests in terms of risk instead of raw technology, why CISOs need to connect security investments to reputation, compliance, and business continuity, and why marketers lose credibility when they lean on buzzwords, analogies, or FUD instead of clarity and education.
View Video
sophos

The Rising Threat of Deepfakes: Why Organizations Must Rethink Trust

Sep 23, 2026 By Jake Dorval In Sophos
For decades, we believed that if could hear someone’s voice on a phone call or see them on a video call, they were who they said they were. What if that’s no longer true? This article is part of an ongoing series from Sophos frontline security operations specialists, sharing the expertise they use to strengthen our industry-leading Managed Detection and Response (MDR) service and defend customers against evolving AI Era threats.
Read Post
Corelight

Recognizing and detecting data exfiltration

Sep 18, 2026 By Tim Chiu In Corelight
Every breach that lands a CISO in front of the board has a common final act: Data leaving the building. Attackers don't get paid for breaking in. They get paid for what they take out. And by the time stolen data appears on an extortion site or in a regulator's inbox, the window to stop the damage has already closed. That is what makes exfiltration so dangerous. It rarely looks like an emergency.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.