Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

teleport

How to Meet EU Cyber Resilience Act (CRA) Requirements

Jul 1, 2026 By Maximilan Heck, Waldemar Kindler In Teleport
In March 2026, attackers from the TeamPCP group compromised Trivy (CVE-2026-33634) — a widely-deployed open-source vulnerability scanner running in thousands of CI/CD pipelines — and turned it into a credential harvester. SSH keys, Kubernetes secrets, cloud tokens — secrets accessible to any pipeline that ran a compromised version — were exposed. The attacker retained access long enough to exfiltrate newly rotated secrets before the window closed.
Read Post
mend

Evaluating AI Security Posture Management Tools: 7 Key Criteria

Jul 1, 2026 By Tiffany Jennings In Mend
Evaluating AI Security Posture Management (AI-SPM) tools is a critical process for organizations integrating AI, specifically Generative AI (GenAI) and Large Language Models (LLMs), into their workflows. Unlike traditional security tools, AI-SPM focuses on the unique risks of AI, including Shadow AI, prompt injection, data poisoning, model theft, and improper model configuration. When assessing AI-SPM tools, security leaders should prioritize the following capabilities.
Read Post
Top Remote Access Software Providers Ranked by Security, Features, and Business Value

Top Remote Access Software Providers Ranked by Security, Features, and Business Value

Jun 30, 2026 By SecuritySenses In SecuritySenses
Choosing a remote access tool is a security decision before it is a convenience one, because every session is a potential doorway into your systems. The top remote access software providers ranked here are judged on three things that matter to security-conscious organizations: how well they protect each connection, how complete their feature set is, and how much value they deliver for the price. Splashtop leads because it scores highly on all three, pairing bank-grade security with the performance and pricing that suit teams of any size.
Read Post
certkit

Quantum is the least interesting part of quantum certificates

Jun 29, 2026 By Todd H. Gardner In CertKit
On June 3, Let’s Encrypt announced that the post-quantum web is going to run on something called Merkle Tree Certificates. The internet did what it does and turned this into a doomsday Q-Day countdown. The quantum computers are coming, your certificates are about to break, panic! Unlike every other security vendor, I’m not worried about quantum computers. But the announcement is still worth your attention. Just not for the reason you’ve been told.
Read Post

GLM 5.2 vs Opus 4.8: Cheaper AI Code, Hidden Risks?

Jun 29, 2026 By Snyk In Snyk
GLM 5.2 just launched from Z.ai, and it might be one of the biggest threats yet to the frontier model premium. It’s open, significantly cheaper than Claude Opus 4.8, and claims to deliver near-frontier coding performance across major benchmarks. But benchmarks only matter if the model can actually build something production-ready.
View Video
teleport

PostgreSQL: How to Control and Audit Agent Access with Identity

Jun 26, 2026 By Megan Moore In Teleport
AI agents querying databases pose well-documented risks. What gets less attention is the fact that PostgreSQL has no native concept of an agent as a distinct actor. This means DBAs are managing access for something that appears in pg_stat_activity like any other role created with CREATE ROLE, with no distinguishing attributes and no indication of who or what initiated the connection. AI agents have no distinct identity when interacting with PostgreSQL.
Read Post
mend

Attestation in Cybersecurity: Types, Uses & Best Practices

Jun 25, 2026 By Tiffany Jennings In Mend
Attestation is a security process that enables one system or entity to prove its state or characteristics to another. This typically involves generating verifiable evidence about the software, hardware, or configuration of a device or environment. The primary goal is to ensure that systems are operating as expected and have not been tampered with. Attestation is important for building trust in distributed environments, where direct oversight and control are not always possible.
Read Post
teleport

Automating Identity and Access for FedRAMP 20x KSIs with Teleport

Jun 25, 2026 By Nicolas Morris In Teleport
Cloud service providers preparing for FedRAMP 20x are encountering a fundamentally different authorization model than the one their compliance programs were built around. The traditional FedRAMP path produced lengthy System Security Plans, point-in-time assessments, and human-readable narrative evidence.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.