Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
Using LLMs, CVSS, and SIEM Data for Runtime Risk Prioritization
A recent University of North Carolina Wilmington study tested whether general-purpose large language models could infer CVSS v3.1 base metrics using only CVE description text, across more than 31,000 vulnerabilities. The results show measurable progress, but they also expose a hard limit that matters far more than model selection: Model quality helps, but missing context sets a ceiling on reliability.
GitGuardian Closes 2025 with Strong Enterprise Momentum, Protecting Millions of Developers Worldwide
Leading secrets security platform sees accelerated adoption across Fortune 500, with 60% of new customers choosing multi-year commitments.
Building Cyber Resilience Beyond Defence - Chris Hallenbeck, CISO at Tanium
In this interview with iTnews, Chris Hallenbeck, CISO at Tanium, discusses the critical shift from traditional cyber defence to proactive resilience. He highlights why organisations must prepare for inevitable incidents through proactive visibility, rapid response, and muscle-memory preparedness, emphasising that resilience isn’t about preventing every breach, but minimising impact and ensuring business continuity.
Building Trust and Autonomy in the Age of Agentic AI - Saqib Khan, Global Field CIO at Tanium
Speaking with iTnews, Saqib Khan, Global Field CIO at Tanium, explores how real-time, trustworthy endpoint data forms the foundation of Agentic AI. He explains why confidence in data sources is key to enabling autonomous decision-making, reducing incidents, and driving faster, more reliable outcomes across IT and cybersecurity environments.
Why Visibility & Agility Define Enterprise Resilience - Erik Gaston (Tanium)
In this interview with iTnews, Erik Gaston, Vice President of Global Executive Engagement at Tanium, highlights why enterprise resilience today depends on visibility, speed, and alignment between technology and business outcomes. He explains how organisations can stay proactive amid evolving threats, emphasising that in the digital era, "slow is the new down".
How to Design a Practical UZTNA Policy Framework
Can one policy rule all access systems? Explore Universal ZTNA implementation stages and discover what's actually achievable.
Sensitive Data Is the Common Thread Across Most OWASP Top 10 Issues. Here's Why
The OWASP Top 10 is usually presented as a list of technical failures. Broken access control. Injection. Insecure design. Misconfiguration. Each category points to something that went wrong in the application. What it doesn’t say explicitly is what was actually at risk when it went wrong. In most real incidents, the answer is not “the application.” It’s the data inside it. Sensitive data is the reason attackers care about OWASP failures in the first place. Credentials.
CrowdStrike to Acquire Seraphic to Secure Work in Any Browser
I’m delighted to announce CrowdStrike’s intent to acquire Seraphic, the leader in browser runtime security. With this acquisition, we will extend the power of the CrowdStrike Falcon platform into the browser to enforce security within sessions across any browser, on any device. The browser is already the operating system of the enterprise workforce, connecting apps, data, and identity.
Cryptographic Key Management Is Becoming a Structural Constraint in Automotive - Download our Whitepaper
Automotive engineering teams are being asked to deliver faster, with less tolerance for failure. Software-defined vehicle programmes, secure OTA rollouts, zonal and service-oriented architectures, and continuous feature delivery are now baseline expectations. In parallel, regulatory pressure is increasing — from WP.29 (R155/R156), ISO/SAE 21434, and the forthcoming EU Cyber Resilience Act — tightening requirements around software integrity, traceability, and lifecycle governance.
Introducing Acronis Archival Storage: Long-term retention made simple for MSPs
Acronis is introducing Acronis Archival Storage, a new S3-compatible cloud storage tier built specifically for long-term data retention, compliance and cost optimization. This addition strengthens the Acronis Cyber Protect Cloud platform by giving MSPs a complete, integrated solution that spans the entire data lifecycle from active protection on PCs and disaster recovery to long-term, compliant data archiving.