Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

manageengine

How Prompt Injection Attacks Put Enterprise Data and Systems at Risk

Nov 6, 2026 By Hanh Pham In ManageEngine
Enterprise AI is increasingly connected to sensitive data, business applications, APIs, and automated workflows. But the security controls surrounding these systems are not always keeping pace. IBM's 2025 Cost of a Data Breach Report found that 13% of organizations experienced breaches involving AI models or applications, and 97% of those organizations lacked proper AI access controls.
Read Post
manageengine

Five worthy reads: How fast-paced AI deployment blind walks IT teams into a security debt

Nov 6, 2026 By Aarthi Murugan In ManageEngine
Five worthy reads is a regular column on five noteworthy items we’ve discovered while researching trending and timeless topics. In this edition we talk about the biggest tension in tech right now, which isn't building AI faster but surviving the security shortcuts taken to launch it and discover how smart teams can rewrite the play-book on governance.
Read Post
manageengine

Exploit Wednesday: The blind spot in your Patch Tuesday routine

Nov 4, 2026 By Mahanya V In ManageEngine
On Patch Tuesday in January 2023, Microsoft fixed a privilege escalation flaw in afd.sys, the Windows driver behind the Winsock networking interface. Two IBM X-Force researchers who had never worked with that driver compared the old and new versions of the file and had a working exploit for Windows 11 in about a day. China's 360 IceSword Lab later reported finding the same flaw already exploited in the wild that month.
Read Post
manageengine

PHP2Shell mitigation: Applying the PHP workaround with Endpoint Central

Nov 4, 2026 By Manish from ManageEngine In ManageEngine
On October 21, 2026, PHP fixed two critical unauthenticated remote code execution flaws, CVE-2026-109618 and CVE-2026-109619. CISA added both to its Known Exploited Vulnerabilities catalog on October 26th. The real fix is upgrading PHP and restarting every worker process. But many Windows servers can’t do that yet: the vendor hasn’t certified the new version, the PHP branch is end-of-life, or nobody knows whether a PHP copy exists inside an old application.
Read Post
manageengine

Why most security training fails and how behavioral science can fix it

Nov 3, 2026 By Omar Hafiz In ManageEngine
We need to face a bitter truth: Most security awareness training out there just doesn’t work the way it’s supposed to. Year after year, companies worldwide pour billions into all sorts of training programs, posters, and click-through modules, yet phishing click incident rates stubbornly persist with no sign of them fading away any time soon. So, what are we missing? According to Verizon’s Data Breach Investigations Report, the human element is involved in 62% of breaches.
Read Post
manageengine

DHCP Fingerprinting in Windows: Applying Smarter DHCP Policies for Device Profiling with DDI Central

Nov 2, 2026 By [email protected] In ManageEngine
Enterprise networks host a variety of devices, from workstations and VoIP phones to printers and IoT devices. Each group may have different network configuration requirements, making it increasingly difficult to maintain consistent settings as the network grows. Microsoft DHCP policies help address this challenge by evaluating attributes in DHCP requests and applying configurations based on defined conditions.
Read Post
manageengine

6 must-haves in a remote patching solution

Oct 28, 2026 By Mahanya V In ManageEngine
Somewhere in your fleet sits a laptop with a pristine, 100% compliance score. Not because it’s running the latest patches, but because it hasn’t talked to the server in three weeks, and a device that never checks in can’t exactly fail an audit, right? IT teams now manage more endpoints outside the office than inside it.
Read Post
manageengine

Your device has been trying to tell your ticket what's wrong-Endpoint Central's extension finally lets it

Oct 28, 2026 By Raghav S In ManageEngine
Imagine that your device data and ticket live in two separate rooms within the same building. Your device already has the performance metrics needed to explain the problem—yet, just to make sense of the ticket, your help desk tech still has to walk into the first room, find the data, and carry it back to the ticket room for analysis. This journey, repeated across every single ticket, is what’s quietly costing your IT team.
Read Post
manageengine

ClickFix: How a fake CAPTCHA becomes a malware delivery mechanism

Oct 27, 2026 By Judin Joan Soundarya In ManageEngine
CAPTCHAs are designed to distinguish humans from automated systems. A user types distorted letters or clicks a few crosswalks, and in doing so proves there is a human behind the keyboard rather than a script. The whole idea rests on one assumption: A human, unlike a bot, will pause and think for a moment before acting. ClickFix takes that assumption and turns it into the attack itself. The fake verification screen does not ask the user to prove they are human by thinking.
Read Post

Everything you need to stay ahead of the 47-day SSL/TLS certificate validity mandate

Oct 23, 2026 By ManageEngine In ManageEngine
Phase one of the CA/Browser Forum's reduced certificate validity mandate is already live. By March 2029, public CA certificate renewal frequencies will be up to eight times higher. The mandate effectively sets a minimum bar for certificate management. You need full visibility into every certificate in your environment, automatic renewal workflows that can handle a much higher frequency without manual effort, and deployment that gets the renewed certificate live at the target server along with the necessary post-deployment actions. ManageEngine Key Manager Plus covers all three of these facets.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.