Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
BlueVoyant: The Third-Party Gap Most Organizations Haven't Closed
How regulations and local legislations are reshaping third-party risk globally Local legislatures are being rolled out across the globe. DORA is in force. NIS2 is being transposed across EU member states. Bill C-8 in Canada is in final steps for review. All of these are putting third-party relationships under a microscope, making it the responsibility of the organization when something goes wrong in their supply chain.
Why network vulnerability management is critical for businesses and how to automate it
Network vulnerability management is no longer a periodic security task. As networks expand across locations, vendors, and OSs, vulnerabilities can emerge quietly through configuration changes, outdated firmware, or delayed patching. Without consistent visibility and automation, teams often discover risks only after they affect availability, security, or compliance. Effective vulnerability management requires continuous awareness, structured assessment, and controlled remediation.
Anatomy of a DevOps Breach: How Global Brands Became Cyber Targets
From $890M in operational losses and 1.1TB of exfiltrated corporate data to 28,000 repositories affected. GitProtect's latest report exposes the critical vulnerabilities weaponized against industry leaders.
What Is Agentic Threat Intelligence?
Agentic threat intelligence is an emerging CTI model where bounded agents support repetitive investigation work, such as collection, enrichment, prioritization, and evidence packaging, while analysts retain control over takedown and escalation decisions. Vendor briefings are full of “agentic AI” right now. Most of them describe the same thing: faster dashboards and smarter alerts. That is not agentic threat intelligence.
The New CISO Ep. 147 - Walt Powell | CISO 3.0: The Playbook for Delivering Impact and Influence
What separates a CISO who survives from one who shapes the boardroom? In this episode, Steve Moore sits down with Walt Powell, Lead Field CISO at CDW and author of The CISO 3.0, to unpack the modern CISO playbook—why technical credentials alone no longer cut it, how to build personal eminence, and why most security leaders are still treated as second-class C-suite citizens.
The Howler Episode 31 - Trisha Farrow
This month, we sit down with Trisha Farrow, our Senior Vice President of People and Facilities. In this episode, Trisha Farrow shares the heart behind her leadership—why human connection, courage, and curiosity matter more than ever in a fast-changing world. From building inclusive cultures to navigating AI in HR, she offers a powerful perspective on what it really means to lead people, not just processes.
Acronis recognized as a Leader in System Security in the G2 Summer 2026 Grid Report
Acronis Cyber Protect Cloud has been named a Leader in the G2 Summer 2026 Grid Report for System Security, ranking in the category. The recognition highlights Acronis’ role in helping MSPs and IT teams strengthen system protection through an integrated platform that brings together cybersecurity, backup, recovery, monitoring and management.
AI Risk Management as a Function of AI Governance: A Holistic Approach
Artificial intelligence (AI) is transforming industries, but it also introduces new risks that organizations must manage. Effective AI risk management is a critical function within AI governance. This article explains how AI risk management fits into the broader governance framework, why it matters, and how organizations can adopt a connected, data-driven approach to reduce AI-related risks continuously.
The Investigation Gap in Traditional MDR
Most MDR providers stop at detection and escalation. Two new capabilities in BlueVoyant AI (BlueVoyant's MDR platform), Cloud Forensics and Device Forensics, extend the service into active investigation, giving analysts the tools to determine what happened during an incident rather than simply flagging that one occurred. When an incident requires traditional forensic investigation, these same tools provide a direct transition into that process.
The Definitive SOC 2 Compliance Guide
Every day, service organizations handle sensitive customer information covered by data protection laws and subject to security compliance requirements. In the business-to-business world, customers require that their vendors provide validation and assurance over their privacy and security controls, typically asking for independent third-party attestations and reports.