Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

knowbe4

New Phishing Kit Uses AI to Fully Automate Vishing Attacks

Sep 2, 2026 By KnowBe4 Team In KnowBe4
A new phishing kit is using generative AI to fully automate voice phishing (vishing) attacks, according to researchers at Group-IB. The phishing platform, called “Balonx,” includes a module dubbed “CallFlow” that the researchers say “represents a fundamental evolution” in the phishing-as-a-service market.
Read Post
keeper

Shadow AI: What Clients Aren't Telling Their MSPs

Sep 2, 2026 By Peter Koros In Keeper
MSPs are expected to understand their clients’ technology environments. They know which endpoints are managed, which applications are business-critical, which systems require patching or maintenance, where sensitive data resides and who has access to it. Increasingly, however, critical technology decisions are now being made without IT or MSP involvement. Across client environments, this can take many forms: And each instance can occur without the MSP ever knowing.
Read Post
Zenity

Governance Strikes Back: The Most Used, Most Abused Word in the Galaxy

Sep 2, 2026 By Ben Hanson In Zenity
Ask AI to Choose a prompt Write a TLDR of this post Explain the security risk Summarize what CISOs should know When I walked to the stage in Copenhagen, I had a lot on my mind. For 3 days I'd had countless conversations with leaders and practitioners about AI and agentic security. The one word on everyone's lips was "governance"; day 3 at the conference was "Governance Day," in fact. This is a bag one vendor was giving out: But governance of what? To what end?
Read Post
jfrog

Extending the Single Source of Truth to the Agentic Software Supply Chain

Sep 2, 2026 By The JFrog Team In JFrog
Every developer on your team now runs multiple agents. None of them are waiting for human sign-off to act. That’s exactly the gap we discussed and closed at swampUP 2026. JFrog unveiled new capabilities that extend the JFrog Platform as not only the Single Source of Truth for OSS and heritage software, but now the Agentic Software Supply Chain. Here’s everything we announced, and why it matters.
Read Post

Cybersecurity Leaders React to OpenAI's Hugging Face Breach UpGuard

Sep 2, 2026 By UpGuard In UpGuard
In July 2026, OpenAI's own AI agents escaped their sandbox and reached Hugging Face's production systems during an internal cybersecurity evaluation. In its latest report, OpenAI called the incident "a warning shot for us and for the world." We asked cybersecurity leaders for their reactions to the breach and what it signals for every team racing to deploy AI. One detail stands out. Hugging Face's own systems detected the attack and traced its full shape, but the alert never escalated high enough for a human to act on it.
View Video
The Screenshot Looked Better-But One AI Edit Changed the Evidence

The Screenshot Looked Better-But One AI Edit Changed the Evidence

Sep 2, 2026 By SecuritySenses In SecuritySenses
A security analyst prepares a phishing report for publication. The original screenshot is accurate but messy: a personal email address is visible, the browser contains unrelated tabs, and a notification blocks part of the page. The analyst uses an image editor to clean it up. The result looks professional. Unfortunately, one character in the suspicious domain has also changed. Tools such as Nano Banana can edit existing images and generate new ones, but security communication introduces a requirement ordinary visual content may not have: some pixels represent facts. Improving the image cannot be allowed to rewrite them.
Read Post
Reach Security Publishes New Report Proving the Scale and Impact of Configuration Drift as a Critical Cybersecurity Risk in the Age of AI

Reach Security Publishes New Report Proving the Scale and Impact of Configuration Drift as a Critical Cybersecurity Risk in the Age of AI

Sep 1, 2026 By Reach Security In Reach Security
Twelve months of production telemetry reveal the scale, causes and security impact of configuration drift, pointing to firewall and EDR tool risk.
Read Post
kovrr

Three Frameworks, Three Definitions of AI Risk

Sep 1, 2026 By Kovrr In Kovrr
Cross-mapping tables for AI evidence in life sciences already exist and are broadly right. Data integrity practice lines up against data governance requirements, software lifecycle logs against technical documentation and logging, human review checks against human oversight duties, post-market surveillance against post-market monitoring. Build one repository, present it two ways. ‍ All of that is sound and it starts one step too late.
Read Post
elastic

Defending against AI-fueled social engineering

Sep 1, 2026 By Joe DeFever In Elastic
Social engineering has always been the softest edge of enterprise defense, and AI is sharpening adversaries’ attacks. Phishing, business email compromise, and impersonation still dominate the initial-access playbook, but AI has stripped out the cost, time, and skill barriers that once forced attackers to choose between reach and precision.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.