Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Trustwave

Inside Silver Fox's Den: Trustwave SpiderLabs Unmasks a Global Threat Actor

Aug 5, 2025 By Trustwave In Trustwave
This blog is the latest in a series that delves into the deep research conducted daily by the Trustwave SpiderLabs Threat Operations team on major threat actor groups currently operating globally. The Silver Fox threat actor group, also associated with attacks attributed to Void Arachne and Great Thief of the Valley, is a relatively new, most likely China-based threat group that has emerged as a significant player in advanced persistent threat (APT) campaigns.
Read Post
Trustwave

Understanding DocumentDB's Network Security Trade-Offs: The VPC Challenge

Aug 5, 2025 By Selam Gebreananeya In Trustwave
AWS DocumentDB by default is securely isolated within a VPC, unreachable from the public internet, what could be more secure? This security architecture can create unexpected challenges and complexity. The root cause? The very VPC isolation designed to protect DocumentDB can introduce a complex web of networking requirements, operational considerations, and architectural decisions that require careful management to maintain security.
Read Post
knowbe4

Warning: New Phishing Campaign Targets Instagram Users

Aug 5, 2025 By KnowBe4 Team In KnowBe4
A phishing campaign is targeting Instagram users with phony notifications about failed login attempts, according to researchers at Malwarebytes. Notably, the emails contain "mailto" links rather than traditional URLs, which help the phishing messages avoid being flagged by security filters. "Instead of linking to a phishing website, which is most common with emails like this, both the ‘Report this user’ and ‘Remove your email address’ links are mailto links," the researchers write.
Read Post
netskope

Introducing Netskope One Copilot for Private Access

Aug 5, 2025 By Francisca Segovia In Netskope
Any organization that’s undergone a security transformation knows the promise of zero trust network access (ZTNA): secure, least-privilege access to private applications, anywhere, on any device. But turning that promise into operational reality is often far from simple. Between fragmented tools, complex configurations, and sprawling environments, implementing ZTNA can quickly become a manual, time-consuming, and error-prone process.
Read Post
netskope

Beyond LLMs: The Strategic Need for MCP Security

Aug 5, 2025 By Melody Nouri In Netskope
Large language models (LLMs) are transforming enterprise operations, but their growing use introduces a critical security challenge: securing how they access sensitive data and integrate with existing tools. This is where Model Context Protocol (MCP) servers become a vital, yet often overlooked, part of AI security. These servers act as the crucial link, enabling LLMs to securely connect with diverse data sources and tools, significantly expanding attack surfaces that demand our immediate attention.
Read Post
astra

DORA Penetration Testing: What CTOs and CISOs Need to Know

Aug 5, 2025 By Sanskriti Jain In Astra
The Digital Operational Resilience Act (DORA) is the EU’s response to the increasing operational risks posed by an interconnected financial system. It’s about more than cybersecurity; it’s about proving that financial institutions can keep critical services running through disruption. That’s where DORA penetration testing fits in. It shifts testing from a technical task to a strategic control, one that connects technology, risk, and business continuity.
Read Post
Content Marketing Is the Key to Sustainable Business Growth

Content Marketing Is the Key to Sustainable Business Growth

Aug 5, 2025 By SecuritySenses In SecuritySenses
Content marketing is no longer just a buzzword; it has become a core business strategy. As consumer behavior shifts and digital platforms continue to evolve, brands must find authentic ways to connect with their audiences. Instead of relying solely on hard-sell tactics, content marketing offers valuable information that meets the needs of potential customers. This approach helps build trust, strengthen brand authority, and promote long-term engagement. For companies focused on scaling, content becomes more than just a tactic; it serves as the engine behind sustainable growth.
Read Post
squarex

SquareX Researchers Reaffirms their Browser Security Thought Leadership with Multiple Vulnerability Disclosures in Key Black Hat and DEF CON 33 Talks

Aug 4, 2025 By SquareX
SquareX will be disclosing multiple key research findings at Black Hat USA and DEF CON 2025 this August. Through multiple talks, the researchers will be revealing critical architectural vulnerabilities in passkey authentication systems, enterprise DLP and browser extensions.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.