Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

sentrium

DeepChat AI agent XSS-to-RCE via Mermaid and Electron IPC

Dec 17, 2025 By Theklis Stefani In Sentrium
In December 2025, a critical remote code execution vulnerability was disclosed in DeepChat, an open-source desktop AI agent platform built using Electron. The issue, tracked as CVE-2025-67744, affects all DeepChat versions prior to 0.5.3 and carries a CVSS score of 9.6. The vulnerability arises from the interaction between two separate weaknesses. The first allows attacker-controlled JavaScript execution through unsafe rendering of Mermaid diagrams.
Read Post
cato networks

AIOps in the Cato SASE Platform: Using Predictive AI Networking to Shift from Reactive to Proactive IT

Dec 17, 2025 By Dr. Guy Waizel In Cato Networks
It was a quiet Monday morning until John, head of IT, opened his laptop and saw 424 new support tickets. Users across the office were reporting issues like “apps won’t load” and “internet not working.” After hours of investigation that stretched into the next day, the team traced the problem to a branch router overwhelmed by malformed DNS queries from a misbehaving IoT device.
Read Post
salt security

The 12 Months of Innovation: How Salt Security Helped Rewrite API & AI Security in 2025

Dec 17, 2025 By Eric Schwake In Salt Security
As holiday lights go up and inboxes fill with year-in-review emails, it’s tempting to look back on 2025 as “the year of AI.” But for security teams, it was something more specific – the year APIs, AI agents, and MCP servers collided across the API fabric, expanding the attack surface faster than most organizations could keep up. At Salt Security, we spent 2025 focused on one thing: defending the API action layer where AI, applications, and data intersect.
Read Post
Exploring The Future Of AI In Cybersecurity Penetration Testing

Exploring The Future Of AI In Cybersecurity Penetration Testing

Dec 17, 2025 By SecuritySenses In SecuritySenses
In recent years, the role of Artificial Intelligence (AI) in various fields has grown tremendously, and cybersecurity is no exception. As cyber threats evolve in complexity, the need for innovative solutions like AI-driven penetration testing becomes more crucial. AI has the potential to revolutionize how businesses approach security, making penetration testing faster, more accurate, and more effective. This article delves into the increasing role of AI in cybersecurity, particularly in penetration testing, exploring its benefits, challenges, and future implications.
Read Post
link11

Link11 Identifies Five Cybersecurity Trends Set to Shape European Defense Strategies in 2026

Dec 16, 2025 By Link11
Link11 releases new insights outlining five key cybersecurity developments expected to influence how organizations across Europe prepare for and respond to threats in 2026. The findings are based on analysis of current threat activity, industry research, and insights from the Link11 European Cyber Report, alongside broader market indicators such as PwC's Global Digital Trust Insights 2026.
Read Post
Torq

Stop Feeding Logs to LLMs: A Multi-Agent Approach to Security Investigation

Dec 16, 2025 By Noam Cohen In Torq
See how Torq harnesses AI in your SOC to detect, prioritize, and respond to threats faster. Request a Demo Noam Cohen is a serial entrepreneur building seriously cool data and AI companies since 2018. Noam’s insights are informed by a unique combination of data, product, and AI expertise — with a background that includes winning the Israel Defense Prize for his work in leveraging data to predict terror attacks.
Read Post
teleport

Secure AI Agent Infrastructure with Zero-Code MCP

Dec 16, 2025 By Boris Kurktchiev In Teleport
Learn how to secure AI and MCP infrastructure without writing authorization code, rewriting MCP servers, or limiting agent work with Teleport’s zero-code MCP integration. AI agents are becoming powerful participants in engineering workflows. But without meaningful authorization boundaries, they can quickly become an existential security risk. AI agents do not behave like traditional applications. Instead, they generate actions and chain together tools in unpredictable ways.
Read Post

Proactive WAF Vulnerability Protection & Firewall for AI + Multiplayer Chess Demo in ChatGPT

Dec 16, 2025 By Cloudflare In Cloudflare
In this episode of This Week in NET, we talk with Daniele Molteni, Director of Product Management for Cloudflare’s WAF, about how Cloudflare responded within hours to a newly disclosed React Server Components vulnerability — deploying global protection before the public advisory was even released.
View Video
sumologic

Questions to ask before vetting an AI agent for your SOC

Dec 16, 2025 By Margaret Selid In Sumo Logic
So you’re ready to “hire” an agent or two for security operations. While AI agents won’t replace your human analysts, they are quickly becoming indispensable team members. Choosing the right ones should resemble a typical hiring process: you need to determine if they possess the necessary skills to fill your team’s gaps, work effectively with others, and grow with your organization. Here are five questions worth asking before you bring an AI agent on board in your SOC.
Read Post

Why "We Thought It Was On" Keeps Leading to Breaches

Dec 16, 2025 By Reach Security In Reach Security
At UC Irvine’s Digital Leadership Agenda 2026, moderated by Nicole Perlroth, Garrett Hamilton illustrates what those blind spots can look like: “We believed it was deployed.”“It was turned on.”“It should have stopped this.” Except one exception, one policy gap, one control not applied at scale — and assumptions replace reality. The real problem isn’t visibility. It’s continuously validating intent against execution.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.