Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Arctic Wolf

Inside FortiBleed: Reverse Engineering the CyberStrike Harvester Behind a Global FortiGate Credential Factory

Jun 23, 2026 By Arctic Wolf Labs In Arctic Wolf
FortiBleed is a large-scale credential compromise campaign that targets internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. The campaign does not depend on a malware payload; instead, it uses a credential pipeline that utilizes credential stuffing, password spraying, configuration harvesting, offline cracking, and post-authentication capture processing.
Read Post
tanium

Continuous vulnerability management: Is your program actually continuous?

Jun 23, 2026 By Tanium In Tanium
Continuous vulnerability management (CVM) is an ongoing, automated approach to discovering, analyzing, prioritizing, and remediating security weaknesses across an organization's IT environment. It replaces periodic scans with real-time visibility that shrinks attacker opportunity windows.
Read Post
seemplicity

How to Use AI for Vulnerability Management

Jun 22, 2026 By Jessica Amado In Seemplicity
With over 48,000 CVEs published in 2025 and attackers weaponizing vulnerabilities in as little as 20 hours, traditional vulnerability management is no longer enough. This post breaks down the key findings from the SANS whitepaper The Exposure Gap: From Vulnerability Management to AI-Driven Control, and what it means for security teams trying to get ahead of risk. In 2025, over 48,000 CVEs were published. That’s roughly 130 new vulnerabilities every single day.
Read Post
jfrog

PixelSmash - Critical FFmpeg Vulnerability Turns Media Files into Weapons

Jun 22, 2026 By Yuval Moravchick In JFrog
JFrog Security Research recently discovered and disclosed a critical vulnerability in FFmpeg, the world’s most widely deployed media processing framework. The discovered vulnerability, which we’ve named PixelSmash, is CVE-2026-8461 – a heap out-of-bounds write in the MagicYUV decoder (CVSS 8.8 High). We escalated this vulnerability from a simple crash all the way to reliable remote code execution – all it takes is processing a single malicious media file.
Read Post

How to Setup AI Rules, Skills, Hooks and MCPs

Jun 22, 2026 By Snyk In Snyk
In this video, we break down how to properly set up and use AI extension points - specifically MCP (Model Context Protocol) servers, Rules, Skills, and Hooks - to supercharge your development workflow. Using practical, security-flavored examples with Claude Code and Snyk, you'll learn how to configure a local project environment that automatically catches vulnerabilities before they ever hit your codebase. Whether you use the Claude CLI, VS Code extensions, or alternate AI ecosystems like Cursor or Gemini, you can use these exact steps as a blueprint to automate any workflow in your project.
View Video
outpost 24

Why Annual Penetration Testing No Longer Matches Modern Application Risk

Jun 19, 2026 By Dominique Adams In Outpost 24
Penetration testing remains one of the most effective ways to identify exploitable vulnerabilities, validate security controls, and provide assurance that applications can withstand real-world attack techniques. For years, annual penetration testing was a reasonable approach. Most business applications changed relatively slowly, with major releases happening a handful of times each year.
Read Post
sedara

FortiBleed Is a Reminder: You Can't Protect What You Can't See

Jun 19, 2026 By Liz Sujka In Sedara
A recent report about exposed Fortinet and FortiGate VPN credentials is a reminder of a hard truth in cybersecurity: risk is not always hidden in advanced malware or complex attack chains. Sometimes, the biggest exposure comes from known systems, forgotten access, weak credentials, or internet-facing assets that are not being monitored closely enough.
Read Post
Securing Commercial Properties After Severe Storm Damage

Securing Commercial Properties After Severe Storm Damage

Jun 19, 2026 By SecuritySenses In SecuritySenses
When a severe storm hits a commercial facility, the aftermath can be catastrophic. High winds, torrential rain, and flying debris disrupt daily operations and threaten structural stability. Property managers face immediate pressure to protect the assets and minimize financial losses. Taking immediate control of the situation prevents minor issues from turning into major disasters. Speed matters when dealing with natural elements that continue to damage a building long after the clouds clear. A proactive response limits operational downtime.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.