Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Why the Target Breach Wasn't a Detection Failure - It Was Prioritization | Garrett Hamilton at UCI

Jan 8, 2026 By Reach Security In Reach Security
Nicole Perlroth asks Garrett how Reach's involvement would have impacted the breach with Target. Attackers came in through a third-party HVAC vendor. Credentials were compromised. Alerts fired. But nothing rose to the level of urgency it deserved. As Garrett Hamilton explains at UCI, this is where security breaks down—not detection, but prioritization. Most teams keep investing in reacting faster inside the SOC. The harder (and more effective) shift is upstream: reducing the exhaust before it ever hits the console.
View Video
cyberint

Zestix Threat Actor Profile | TTPs, Victims, and Breach Activity

Dec 29, 2025 By Gemma Goldstein In Cyberint
Zestix is identified as a criminal threat actor primarily motivated by personal gain. The actor first emerged in September 2025 and operates at an intermediate resource level, functioning as an individual. Zestix has been involved in significant data breaches, notably targeting organizations in the transportation and government sectors.
Read Post
idstrong

What You Need to Know about the Aflac Data Breach

Dec 29, 2025 By IDStrong In IDStrong
The American Family Life Assurance Company of Columbus (Aflac) is a Fortune 500 company that provides financial protection through supplemental life and health insurance products to millions of individuals worldwide. Founded in 1955, the company serves policyholders and customers through its subsidiaries in the United States and Japan.
Read Post
idstrong

What You Need to Know about the University of Phoenix Data Breach

Dec 24, 2025 By IDStrong In IDStrong
The University of Phoenix was founded in 1976 and is headquartered in Phoenix, Arizona, as a private, for-profit university designed for working adults and non-traditional students balancing family, career, and education. Accredited by the Higher Learning Commission, the institution later became one of the first online universities, offering personal support, career guidance, and flexible learning opportunities through over 100 programs.
Read Post
jfrog

The Breach You Didn't Expect: Your AppSec Stack

Dec 22, 2025 By Jens Eckels In JFrog
Imagine this. Your phone rings on January 2nd, and it’s your DevSecOps and AppSec groups. A major security vulnerability is exposing your business, and your teams are trying desperately to find and fix it to protect your data. You probably have scars as far back as Log4j, as well as threats from more recent incidents like npm attacks, Glassworm and others ringing in your ears. With CVEs expected to rise by tens of thousands a year, you can envision that the situation will only worsen.
Read Post
nightfall

When Customer Data Quietly Walks Out the Door: Lessons from the Coupang Breach

Dec 19, 2025 By Chris Martinez In Nightfall
Large data breaches rarely begin with dramatic system failures. More often, they start with sustained, unauthorized access to sensitive data that goes undetected for months. The recent breach at Coupang, South Korea’s largest e-commerce platform, illustrates this pattern clearly. Nearly 34 million customer records were likely exposed over an extended period before detection.
Read Post
upguard

Cybersecurity Predictions for 2026: Human Risk, AI Data Leaks, and the Next Big Breach

Dec 18, 2025 By Greg Pollock In UpGuard
Looking back at 2025, two mega-trends from the past have continued: First, data breaches remained a constant and continued to trend upward; and second, there was once again a headline disaster no one anticipated. The first point needs no elaboration; data breaches are like air pollution—an accepted nuisance that only occasionally becomes so severe that we wonder why we live like this. For the second point, I gesture toward the major incidents of recent years. MoveIt. Crowdstrike. Snowflake.
Read Post
idstrong

What You Need to Know about the LastPass Data Breach

Dec 18, 2025 By IDStrong In IDStrong
LastPass prides itself on being a pioneer in cloud security technology, providing password and identity management solutions for personal and business digital safety. Its over 800 employees and over 20 million customers worldwide have made the company an attractive target for cybercriminals. The company has been in the headlines for several data incidents over the past few years.
Read Post
idstrong

What You Need to Know about the 700Credit Data Breach

Dec 18, 2025 By IDStrong In IDStrong
700Credit is the major provider of credit reports, fraud detection, identity verification, soft pull credit data, and compliance solutions in powersports, marine dealerships, and automotive in the United States. Based in Michigan, it offers solutions for over 21,000 clients and has more than 250 integration partners, while also managing vital data security for millions of consumers.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.