Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

gitprotect

Does It Make Sense to Pay a Ransom? A C-Suite Guide to DevOps Resilience

Aug 27, 2026 By Łukasz Dydek In GitProtect
When ransomware hits, decision makers face an impossible ultimatum: pay the ransom or lose business operations. In software development, data criticality also comes to the forefront. That’s because source code isn’t just some trivial data, but primary intellectual property and a revenue driver. Let’s see what’s exactly at stake and how you can minimize the risk of paying a ransom for your tech business.
Read Post
Featured Post
Identity Everywhere: Bringing Infrastructure Identity to Agentic IT

Identity Everywhere: Bringing Infrastructure Identity to Agentic IT

Aug 26, 2026 By Peter Bailey, SVP/GM of Security, Cisco, and Ev Kontsevoy, CEO In Teleport
Every era of computing eventually exposes the assumptions that made the last era work. For decades, networking succeeded because it was mostly identity agnostic. Packets moved because they had addresses. Routers and switches forwarded traffic because the network knew where something was going, not necessarily who or what was behind it. That model helped build the internet and modern enterprises. But it is not enough for the era we are entering now.
Read Post
mend

The skill layer is a dependency problem without a lockfile: what the OWASP Agentic Skills Top 10 gets right

Aug 26, 2026 By Asaf Saar In Mend
OWASP published version 1.0 of the Agentic Skills Top 10 on August 17, defining ten risk classes for the layer where agents find, load, and run reusable instructions and code. This standard arrived while the problem was still forming, mapping directly to AISVS, the Agentic Security Initiative Top 10, the MCP Top 10, ISO/IEC 42001, and the NIST AI RMF. It ships with working code for signing, sandboxing, and pinning.
Read Post
teleport

Identity Everywhere: Bringing Infrastructure Identity to Agentic IT

Aug 25, 2026 By Peter Bailey, Ev Kontsevoy In Teleport
Cisco and Teleport are announcing a strategic partnership centered on deep technology integration, licensing, and investment. As the largest strategic investor, Cisco is reinforcing its commitment to accelerating the next phase of Teleport's evolution.
Read Post
CloudCasa

How to Set up Backup and Recovery on Your Own Kubernetes Cluster in 5 Minutes

Aug 21, 2026 By CloudCasa In CloudCasa
Regulation is doing more to shape backup strategy right now than almost anything else. NIS2 requires organizations to document their risk management measures, keep an incident response plan on file, and report breaches within 24 hours, with fines that can reach €10 million or 2% of global turnover. DORA goes further for financial entities, requiring documented recovery objectives, regular resilience testing, and an audit trail that holds up to a regulator’s questions.
Read Post

Validity-Override API Tutorial: Confirm If a Leaked Secret Is Still Exploitable

Aug 19, 2026 By GitGuardian In GitGuardian
GitGuardian's validity-override API lets security and engineering teams tell GitGuardian whether an exposed credential is actually valid, even when automatic checks mark it as Failed to Check. Secrets tied to internal services, private APIs, or systems GitGuardian cannot reach often fall into this category. GitGuardian automatically validates most supported credential types, but when it cannot, teams can now perform their own validation and feed the result back into the platform.
View Video
teleport

We Had 13 Engineers Spend Three Months Finding Vulnerabilities with LLMs

Aug 19, 2026 By Rob Picard In Teleport
Blame for all flaws belongs to the flawed human author. Historically, the bottleneck for finding security bugs in software was human bandwidth. As pointed out in this great post by Tom Ptacek, it appears that large language models are exceptionally good at finding them with simple prompting. This adds substantial bandwidth to the effort of finding bugs.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.