Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Arctic Wolf

Reflections from Black Hat: Speed Is Table Stakes. Resilience Is the Win.

Aug 12, 2026 By Dan Schiappa In Arctic Wolf
Black Hat 2026 came just weeks after the Five Eyes cybersecurity agencies — CISA, the UK’s NCSC, Australia’s ACSC, Canada’s CCCS, and New Zealand’s NCSC-NZ — issued a joint statement to boards and executives with the blunt message that AI is rewriting the rules of cyber risk, the window between vulnerability and exploitation is shrinking, and organizations have a matter of months to adapt.
Read Post
Arctic Wolf

Microsoft Defender Patch Bypass: High Severity Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)

Aug 12, 2026 By Arctic Wolf Labs In Arctic Wolf
A critical zero-day vulnerability (CVE-2026-50656/“RoguePlanet”) in Microsoft Defender’s Malware Protection Engine (mpengine.dll) enables local users, including standard, low-privilege accounts, to escalate privileges to NT AUTHORITY\SYSTEM using a race condition and improper link resolution. Microsoft initially issued a patch (Engine v1.1.26060.3008) in July 2026.
Read Post
kroll

The Industrialized Fraud Hiding in Plain Sight

Aug 12, 2026 By Kroll In Kroll
To read more on this story and the significance of Business Email Compromise (BEC), visit The Wall Street Journal where Dave Burg was interviewed (subscription required). A few months ago, scammers hijacked a routine infrastructure project in Surfside Beach, South Carolina, costing the small town $545,000. The scheme stemmed from a single spoofed email sent from a lookalike domain, instructing the town to switch payment from check to ACH.
Read Post
Zenity

Black Hat Proved AI Agents Are Already the Attack Surface

Aug 12, 2026 By Anna Schibli In Zenity
Enterprise AI agents stopped being a pilot project a while ago. They read email, touch source code, operate browsers, and increasingly make decisions inside production systems, which means the security model built for chatbots and prompts no longer covers what is actually happening inside the enterprise. Black Hat USA 2026 turned out to be the week that gap became impossible to ignore.
Read Post
Zenity

Coding Agent Risk for CISOs: Blast Radius, Governance, and Where to Start

Aug 12, 2026 By Dina Durutlic In Zenity
Claude Code, Cursor, GitHub Copilot, and Gemini CLI are running on developer machines across your enterprise right now. They're browsing the web, writing to your filesystem, committing code to your repositories, and calling external APIs under the identity of your engineers. Most security teams have no visibility into any of it. This isn't a future problem.
Read Post
teleport

Navigating SAMA, ADGM & DFSA Requirements with Teleport

Aug 12, 2026 By Mukund Cadambi In Teleport
The Middle East, especially the UAE and Saudi Arabia, has become a priority market for cloud service providers (CSPs) as governments accelerate digital transformation across public and private sectors. The opportunity is real, but so is the complexity. In our work with clients and regulators, Coalfire has seen that market entry often hinges less on commercial certifications and more on meeting strict data sovereignty and cybersecurity requirements.
Read Post

Is your AI system secure enough? MITRE ATLAS Is Now Law.

Aug 12, 2026 By SafeBreach In SafeBreach
For the first time anywhere, the MITRE ATLAS framework and the OWASP Top 10 for LLM applications are written into binding law. Article 15 names data poisoning, model poisoning, adversarial examples, model evasion and confidentiality attacks as threat classes you must have technical measures against—and must be able to evidence to a regulator. The question is no longer whether you have thought about AI security. It is whether you can prove your AI system holds.
View Video

Ep. 73 - EU AI Act-What Actually Lands on August 2nd, and What Slipped to 2027

Aug 12, 2026 By SafeBreach In SafeBreach
The EU AI Act's August 2nd, 2026 deadline just changed shape. Host Tova Dvorin and offensive security engineer Adrian Cully separate what actually lands—Article 50 transparency duties and GPAI enforcement powers—from the high-risk obligations that slipped to December 2027. Inside: Article 15 writes MITRE ATLAS and the OWASP LLM Top 10 into binding law, the DORA / NIS2 / AI Act overlap that makes one incident reportable three times, penalties up to 7% of global turnover, and the five things a CISO should do this week. Part 1 of 2.
View Video
kovrr

AI Security Posture Management: What It Covers and What It Misses

Aug 12, 2026 By Kovrr In Kovrr
AI Security Posture Management arrived as a term before it arrived as a definition. Vendors announced products under the label through 2025 and in volume at RSA Conference 2026, each describing a somewhat different scope, and buyers now evaluate a category whose boundaries depend on who is selling. The lineage is evident, since AI-SPM follows cloud and data security posture management, and the inherited assumptions are where the difficulty starts.
Read Post
kovrr

Building a Security Budget Case With Return on Security Investment

Aug 12, 2026 By Kovrr In Kovrr
Security budget requests fail on arithmetic rather than on argument. A finance function asked to approve spending wants the same information it requires from every other proposal, being what it costs, what it returns and over what period. Most security cases supply the first, describe the second qualitatively, and omit the third. ‍ Return on security investment closes that by expressing the benefit as reduced modeled loss rather than as reduced likelihood of an unspecified bad outcome.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.