Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
Ep. 79 - BeaverTail and InvisibleFerret: The Malware That Rewrites Itself for Every Target
North Korea has stopped writing bad phishing emails. In Part 2 of our DPRK deep dive, Tova Dvorin and Adrian Culley break down how the Reconnaissance General Bureau and Bureau 121 weaponized AI in 2026: Blue Noroff cloning a CFO's voice to authorize emergency liquidity transfers, real-time face swaps passing DevOps job interviews, and Lazarus using LLMs to polymorph BeaverTail and InvisibleFerret for every single target.
Your CFO Just Left You a Voice Note. It Wasn't Her.
A voice note from your CFO on WhatsApp. Her cadence, her urgency—and a reference to a confidential acquisition discussed in a real meeting last Tuesday. North Korea's Blue Noroff builds these backwards: compromise a junior employee's calendar or inbox first, then train a voice model on the stolen context. By the time anyone thinks to verify, the emergency transfer is already sitting in an offshore account.
IEC 62443: the industrial cybersecurity standard explained
For MSPs supporting industrial clients, business leaders responsible for operational risk and OT engineers implementing the standard, IEC 62443 is ultimately about securing OT and ICS environments without undermining availability or safety. Unplanned downtime, legacy systems that cannot be patched, air-gapped facilities with limited or no local IT support, and the need for predictable recovery are the day-to-day realities behind requests to demonstrate IEC 62443 alignment.
Cyber Resilience Act Preparedness: Who's Ready, and Who Can't Be Reached
Computers are not safe. Even the best hardware and software products have the potential to conceal as-yet unknown vulnerabilities. And they aren’t all made that well. Many are shuffled into the world without a plan to detect, remediate, and notify users of those vulnerabilities. The EU’s Cyber Resilience Act aims to improve that situation.
CYJAX Joins the UK Cyber Security Council
CYJAX joins the UK's professional body for cyber security, reinforcing its commitment to developing cyber talent, upholding the highest ethical standards and helping strengthen the future of the profession. CYJAX is proud to announce that we have become a corporate member of the UK Cyber Security Council, the independent professional body dedicated to advancing the cyber security profession across the UK.
The Howler Podcast: Three Year Anniversary
The Howler Podcast is 3! Join Chelsea and Mary as they reflect on the past three years and chat with special guest, Brian NeSmith, Co-founder & Executive Chairman! Interested in running with the pack? Explore careers at Arctic Wolf—one of the fastest-growing and exciting cybersecurity companies in the world, to learn about how you can join our Pack, create impact, and influence what’s next in security operations.
Best Business Management Software in 2026: 10 Options Compared by Category
Every growing company eventually hits the same wall: the tools that worked at 10 people stop working at 50. Spreadsheets turn into a guessing game about which version is current. Goals live in a slide deck nobody opens after the kickoff. Nobody can say for sure who owns a given process anymore. The fix isn't one universal tool - it's picking the right category for the problem you actually have. Here's how the ten most-recommended options break down.
Physical Security Is Still a Cybersecurity Problem: Protecting Hardware Outside the Office
Want to safeguard company data that walks out your front door every day? The largest portion of any security budget typically gets spent on software. Firewalls, endpoint protection, phishing training, password managers... great tools. None of it matters if someone steals a laptop out of your car in a shopping centre parking lot.
What APQP Training Does for Manufacturing Teams
Most product failures are not born on the factory floor; they are baked in long before, during planning. A missed tolerance, an untested assumption, or a supplier risk nobody flagged becomes a costly recall months later. Advanced Product Quality Planning exists to catch those problems before a single part is made.
Why DevSecOps Teams Are Adopting an AI Pentesting Solution
Software teams today are shipping code faster than ever before. New features go live weekly, sometimes daily, and the pressure to stay ahead of competitors means security can no longer be treated as a final checkpoint before release. This shift has pushed DevSecOps teams to rethink how they test for vulnerabilities.