Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

gitprotect

GitProtect vs. Native Microsoft 365 Backup

Aug 21, 2026 By Tomasz Malinowski In GitProtect
Summary Organizations often assume their Microsoft 365 assets are fully protected by native backup tools. However, while Microsoft does offer advanced built-in backup and recovery features, relying solely on a native approach is not a substitute for an independent, enterprise-grade backup strategy. The risks of relying on a single ecosystem for backups are escalating.
Read Post
WatchGuard

AI Isn't Creating New Cyberattacks. It's Changing How They Operate

Aug 21, 2026 By Iratxe Vazquez In WatchGuard
Artificial Intelligence has quickly become one of the most important conversations in cybersecurity. Much of that conversation focuses on what attackers might create next: AI-generated malware, deepfakes, autonomous attacks, or entirely new categories of threats. Those risks matter, but focusing only on new attack techniques misses a much larger transformation already taking place. The real impact of AI is not only what attackers can create. It is how efficiently they can operate.
Read Post

AWS Security Live from Black Hat 2026 with Johnny Wong from Veracode

Aug 21, 2026 By VERACODE In Veracode
In this episode, hosts Ryan and Brian are joined by Johnny Wong, VP of Solutions Architecture at Veracode, to explore how AI-assisted “vibe coding” is changing the way software gets built—and the new security risks that come with it. While large language models are making developers faster and more productive, studies shared in the discussion show that a significant portion of AI-generated code still contains security vulnerabilities, raising concerns about scale and speed in modern development pipelines.
View Video
jfrog

Propagating User Identity From AI Agents to Your Tools: Amazon Bedrock AgentCore Gateway and JFrog Artifactory

Aug 21, 2026 By Carmit Hershman In JFrog
Join us at swampUP New York, September 1-3, for our joint session Trusted AI Delivery at Scale: Securing Every Artifact from Curation to Cloud, where we walk the full chain of custody from the moment a package enters your organization to the moment your agent runs on Amazon Bedrock AgentCore. Register here. AI agents are becoming real users of internal systems. They open pull requests, run queries, and pull and publish artifacts in repositories like JFrog Artifactory.
Read Post
teramind

AI Prompt Data Leakage: How to Secure Sensitive Data in LLMs

Aug 21, 2026 By Teramind In Teramind
As generative AI adoption surges, so does a dangerous new enterprise risk: AI prompt data leakage — the unintentional exposure of confidential corporate data to third-party Large Language Models via user prompts. Why does it happen? Driven by productivity pressure and the need to speed up their work, employees routinely bypass traditional DLP controls.
Read Post
CloudCasa

How to Set up Backup and Recovery on Your Own Kubernetes Cluster in 5 Minutes

Aug 21, 2026 By CloudCasa In CloudCasa
Regulation is doing more to shape backup strategy right now than almost anything else. NIS2 requires organizations to document their risk management measures, keep an incident response plan on file, and report breaches within 24 hours, with fines that can reach €10 million or 2% of global turnover. DORA goes further for financial entities, requiring documented recovery objectives, regular resilience testing, and an audit trail that holds up to a regulator’s questions.
Read Post
kovrr

Maturity Is a Lagging Indicator. Here's a Leading One.

Aug 21, 2026 By Kovrr In Kovrr
A maturity score answers where a program has been. It reports the state of documented process at the moment somebody assessed it, on a cadence measured in quarters or years, using a scale that describes organization rather than outcome. Every property that makes it useful for planning makes it useless as an early warning. ‍ The interesting question is what a leading indicator would look like instead, and the answer requires separating two problems that get treated as one.
Read Post
kovrr

What Counts as One AI Asset? Getting the Unit Right

Aug 21, 2026 By Kovrr In Kovrr
Two teams inventory the same organization and return different numbers. One counts forty-one AI assets, the other counts one hundred and twelve. Neither is wrong, because they counted different things, and nobody had decided what a row represents. ‍ Guidance on building an AI inventory covers which fields a row should carry and skips what a row is. That question determines the count, the risk scores, the regulatory classification and whether two inventories can ever be reconciled.
Read Post
Feroot

Beyond the Compliance Snapshot: Why GRC Needs Continuous Evidence

Aug 21, 2026 By Feroot In Feroot
I recently had the opportunity to speak at the ISACA GRC Conference in San Diego about a challenge I see becoming increasingly important for governance, risk, and compliance teams: How do you prove your controls are actually working in digital environments that never stop changing?
Read Post
astra

How autonomous pentesting kills false positives

Aug 21, 2026 By Ephrim Holyson In Astra
Ask any security engineer what they actually think about their vulnerability scanner, and you will get a version of the same answer. They trust maybe 20% of what shows up in the patching queue. The rest gets a suspicious glance, and a slow death in a backlog. That is the real cost of a false positive. It is quiet, it compounds, and it hollows the tool out from the inside. It is also the reason autonomous pentesting came to replace hypotheses with confirmed exploits.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.