Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Corelight

Stop Chasing Alerts, Start Hunting Adversaries: The New NDR Essentials

Jul 6, 2026 By Richard Bejtlich In Corelight
It was time to write another book. That’s what I thought when I heard that Corelight wanted to update its 2021 book on network detection and response (NDR). Tamara Crawford, who owned the project, scheduled a meeting with me and asked if I might be interested in helping, depending on who might write the text.
Read Post
manageengine

Top tips: How to use public Wi-Fi without handing your data to a stranger

Jul 2, 2026 By Monideepa Mrinal Roy In ManageEngine
Top tips is a weekly column where we highlight what's trending in the tech world and list practical ways to explore these trends. This week, we are tackling something almost everyone does without thinking twice: connecting to public Wi-Fi (and what it could be costing you without you ever knowing). You are at an airport, a coffee shop, or a hotel lobby. You notice your data plan is running low and scroll through the available networks. And there it is: Free Wi-Fi—no password required.
Read Post
manageengine

10 best network device management software

Jul 2, 2026 By akash.mj In ManageEngine
Network outages are still painfully expensive, and configuration mistakes are one of the biggest culprits. A 2023 analysis of Uptime Institute data shows that configuration and change management failures are the top cause of major network outages, responsible for around 45% of network incidents. Even a small configuration slip on a core switch can cascade into large-scale downtime. That’s why consistent, well-governed network device management is key to keeping business services uninterrupted.
Read Post
reach security

What Is Network Security Assurance?

Jul 2, 2026 By John Dominguez In Reach Security
Every security leader has a version of the network in their head. They know which systems should be segmented, which applications should be reachable, which ports should never be open, and which access paths should not exist. They know how the architecture is supposed to work. The harder question is whether the live environment is actually enforcing that design right now. That question is getting more difficult to answer.
Read Post

Episode 18 - Live Fire Defense at Locked Shields

Jul 2, 2026 By Corelight In Corelight
In this episode, host Richard Bejtlich sits down with Corelight Senior Sales Engineers Adam Donadeo and Nico Roosenboom to unpack their firsthand experiences at Locked Shields, the world’s largest international live-fire cyber defense exercise. The conversation dives deep into the chaotic, real-world friction of defending a massive virtualized network alongside 4,000 global experts against aggressive red team waves.
View Video
link11

Mitigating Attacks Before They Impact Infrastructure: Link11 provides next generation network DDoS protection

Jul 1, 2026 By Link11
Link11, a leading European provider of cloud-based cybersecurity solutions, today announced the launch of its completely rebuilt Layer 3/4 DDoS mitigation solution, designed to address the growing complexity of modern network attacks. Today's DDoS attacks are not just simple volume or protocol attacks anymore. They can originate from compromised devices within trusted and legitimate networks, mimic real traffic, and appear in short, high-intensity bursts that leave little time for manual response.
Read Post
cato networks

DuneSlide: Two Critical RCE vulnerabilities via Zero-Click Prompt Injection in Cursor IDE

Jul 1, 2026 By Itay Ravia In Cato Networks
Cato AI Labs has discovered two critical remote code execution (RCE) vulnerabilities in Cursor IDE, the popular development environment which, according to Cursor, is used by over half of the Fortune 500. Both RCE vulnerabilities, which we refer to as “DuneSlide,” achieved a 9.8 CVSS score, and involve breaking out of the IDE’s sandbox environment and were assigned CVE IDs CVE-2026-50548 and CVE-2026-50549.
Read Post
Corelight

What the Black Hat NOC taught me about MCP & agentic SOCs (Chapter 1 of 4)

Jun 30, 2026 By James Pope In Corelight
The first time an MCP (Model Context Protocol) server felt real to me, it wasn't because of a clean demo. It was because of the noise. TL;DR: The harness matters more than the protocol, and the evidence matters more than both. MCP earns its keep when it shortens the path from a good security question to trustworthy evidence, and almost everything interesting about making that work happens in the harness wrapped around the model. In this series, I will cover how to build an MCP for an AI SOC.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.