Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
The Hidden Risk in Your Cloud: And What to Do About It
It's easy to assume everything in the cloud is sorted. Files get saved, apps sync across devices, permissions exist. And on paper, that sounds tidy enough. But in practice? Data goes wandering. A spreadsheet ends up in the wrong folder. A document shared with the wrong person stays shared. A test environment is spun up, used once, then forgotten. Nobody deletes it, of course. Nobody remembers it, either.
CyCognito: Evaluating Attack Surface Management (ASM) Solutions with GigaOm
Join GigaOm Analyst Chris Ray in a webinar dedicated to the potential and importance of Attack Surface Management (ASM) in strengthening cybersecurity defenses. The live event will delve into the 2025 GigaOm Radar for Attack Surface Management. The report offers valuable insights for cybersecurity decision makers on selecting the right tools to manage their attack surface.
Acronis: Protect your Microsoft and Google Data against AI-Enabled Cyberthreats
Your Google Workspace and Microsoft 365 Data is at Risk With the help of Generative AI tools like ChatGPT, cybercriminals are now more effectively targeting Google and Microsoft productivity suites with ransomware and other cyberattacks. Google and Microsoft productivity suites are prime targets for cybercriminals, posing a significant threat to businesses from ransomware and other cyberattacks.
Credential Access Campaign Targeting SonicWall SMA Devices Potentially Linked to Exploitation of CVE-2021-20035
On April 15, 2025, SonicWall published a product notice regarding CVE-2021-20035, a vulnerability impacting SonicWall SMA 100 series appliances. In an updated security advisory for the vulnerability, SonicWall indicated on April 15, 2025 that the vulnerability was being exploited in the wild. The vulnerability was added to CISA’s known exploited vulnerabilities (KEV) catalog the following day.
Building better workflows with multiple drafts
In today's security and IT landscape, the workflows that power your operations are not merely convenient tools—they're essential infrastructure. When a phishing detection workflow fails or an access control process malfunctions, the consequences can be severe: security incidents remain undetected, response times suffer, and organizational risk escalates significantly. This reality creates a paradox for teams.
The Critical Importance of Supply Chain Risk Management in Cybersecurity
In the contemporary digital era, supply chains have transcended their traditional role as mere logistical networks. They have evolved into pivotal ecosystems that underpin the success of modern businesses. Nevertheless, as these intricate systems undergo digital transformation, they have become increasingly vulnerable to cyberattacks.
Why You Can't Secure APIs You Don't Know Exist #APIsecurity #ShadowAPIs #Cybersecurity
Most orgs don’t even know how many APIs they have. And if you can’t see them — you definitely can’t secure them. Wallarm shows why API visibility is the foundation of modern protection.
The Hardest Job I Ever Did (And It Paid Nothing)
Jemma shares how teaching adults with learning difficulties shaped her early career. Despite the impact, the role was underpaid and undervalued — a reality too many face.
The Continued Abuse of Legitimate Domains: A Spike in the Exploitation of Google Drive to Send Phishing Attacks
First QuickBooks, then Microsoft, and now Google—will the hijacking of legitimate third-party platform communications stop escalating in 2025? Our Threat Labs researchers predict the answer is no. As long as these attack tactics remain effective, cybercriminals will continue to use them, which likely explains the spike in the exploitation of Google Services for phishing attacks observed in the first month of 2025.
Lack of Security Awareness Tops List of Obstacles to Cyber Defense
Most organizations cite low security awareness among employees as the biggest barrier to defending against cyberattacks, according to a new survey by CyberEdge Group. “This result reinforces the idea that in cybersecurity, as in so many other areas of business and life, people challenges trump technology issues every time,” the researchers write. “Without doubt, although computers speed up every year, people don’t (and some days we suspect they are getting slower).