Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

indusface

OWASP Top 10:2021 - A02 Cryptographic Failures

May 30, 2025 By Vinugayathri Chinnasamy In Indusface
Cryptographic failures refer to the improper use, implementation, or management of cryptographic systems. These issues often result in unauthorized exposure of sensitive data like passwords, credit card numbers, or personal records. In the OWASP Top 10 – 2021, this category replaced the broader ‘sensitive data exposure’ from the 2017 list, with a sharper focus on the misuse or failure of cryptographic mechanisms.
Read Post
one identity

AI - More Than a Buzzword?

May 30, 2025 By Josh Karnes In One Identity
Lately, the common theme in emerging identity security technology has been… well, you know. AI. It’s all anyone wants to talk about. All of us in the IAM business have been scurrying to find a way to tell our customers and the market that, yes! we have AI! we've had it all along! If that were so obviously true, then why are we having to tell you about it now? As an identity security technologist, I’ve experienced the growing pains of AI in IAM.
Read Post
vanta

SOC 2 vs. HIPAA: Everything you need to know

May 30, 2025 By Vanta In Vanta
SOC 2 and HIPAA are widely adopted security standards aimed at protecting in-scope organizations and the sensitive data they process from cybersecurity threats. While they have the same overarching security goal, HIPAA and SOC 2 differ in a few major aspects, and their implementation specifics can also vary considerably. ‍ Depending on your security posture and compliance needs, you may need to implement one or both frameworks.
Read Post
aikido

Top Container Scanning Tools in 2025

May 30, 2025 By Ruben Camerlynck In Aikido
Containers have become the backbone of modern DevOps, but they also introduce new security headaches. A single vulnerable base image or misconfigured container can snowball into a major breach across dozens of services. In fact, recent research found that about 75% of container images carry high-severity or critical vulnerabilities. Add to this the 2025 trends of supply chain attacks and ever-evolving CVEs, and it’s clear that container scanning tools are a must-have.
Read Post
Comprehensive Guide to Implementing Asset Monitoring Solutions

Comprehensive Guide to Implementing Asset Monitoring Solutions

May 30, 2025 By SecuritySenses In SecuritySenses
Are you seeking support to avoid unexpected asset malfunctions? Companies utilize asset monitoring solutions to maintain equipment operations without disruptions while protecting against costly downtime periods and extending the life of important infrastructure. Here's the good news... These solutions implement more easily than anticipated but yield substantial advantages. Our guide demonstrates all necessary steps to establish an efficient asset monitoring system for your business.
Read Post
Arctic Wolf

Understanding the Risks of Remote Monitoring and Management Tools

May 29, 2025 By Arctic Wolf In Arctic Wolf
The IT environment is evolving. Organizations have embraced hybrid work models, expanded their operations and personnel footprints, and digitalized their processes and capabilities. And those in charge of these now sprawling environments must deal with the increasingly complicated task of keeping endpoints, users, and more both operational and secure.
Read Post
knowbe4

Capital One Customers Targeted By Credential Harvesting Phishing Campaign

May 29, 2025 By KnowBe4 Threat Lab In KnowBe4
The KnowBe4 Threat Lab has identified an active phishing campaign impersonating Capital One. The attacks are sent from compromised email accounts to help them evade reputation-based detection by native security and secure email gateways (SEGs). Once delivered, the attacks use stylized HTML templates and brand impersonation to trick the recipient into believing the communications are legitimate. Recipients who fall victim are directed to credential-harvesting websites.
Read Post
knowbe4

Scammers Exploit Uncertainty Surrounding US Tariffs

May 29, 2025 By KnowBe4 Team In KnowBe4
Cybersecurity experts are warning that scammers are taking advantage of uncertainty surrounding the U.S. administration’s tariff policies, CNBC reports. Fraudsters may send texts or emails posing as retailers, delivery companies or government agencies, requesting tariff-related payments for purchases and deliveries. James Lee, president of the Identity Theft Resource Center, noted that scammers frequently take advantage of new government policies to launch phishing attacks.
Read Post
veracode

How ASPM Analytics Empower CISOs with Real-Time Security Insights

May 29, 2025 By Sohail Iqbal In Veracode
Understanding the security posture of your application stack is increasingly important. Exploitation of vulnerabilities surpassed phishing as the known initial access vectors in non-Error, non-Misuse breaches, according to the Verizon 2025 Data Breach Investigations Report. As a CISO or security leader, are you prepared for this shift in the industry?
Read Post
Torq

The Multi-Agent System: A New Era for SecOps

May 29, 2025 By Torq In Torq
Security teams face mounting pressure to defend against sophisticated cyber threats. Traditional automation strategies are often rigid, reactive, and lack the ability to scale effectively. Many SOCs already have access to generative AI to assist with simple tasks and now Torq has brought agentic AI into the mix — which thinks, acts, and learns autonomously to handle security risks. What’s next?
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.