Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

trilio

Sovereign Clouds Need Open Data Protection. Here Is Why.

Feb 19, 2026 By Rodolfo Casas In Trilio
Digital sovereignty is not a talking point anymore. It is a real technical requirement. Governments, telcos, and regulated enterprises are building sovereign clouds on OpenStack to keep data under their jurisdiction. But what about the backups? If your sovereign cloud data protection solution uses a proprietary format, you have traded one lock-in for another.
Read Post

The New CISO Podcast Ep. 141 - Dean Sapp | Six Steps for Better Communication as a CISO

Feb 19, 2026 By Exabeam In Exabeam
In this episode of The New CISO, host Steve Moore speaks with Dean Sapp, CISO and Data Protection Officer at Filevine, about one of security's most critical yet overlooked skills—written communication. Drawing from a brutal college English class that failed students for a single typo and over 20 years building security programs in the legal tech industry, Dean reveals why the ability to articulate security findings clearly separates average professionals from exceptional leaders who drive real business impact.
View Video
apono

Selling to Regulated Customers: 5 Requirements You Need to Know and Prove

Feb 19, 2026 By Gabriel Avner In Apono
So you’ve got a groundbreaking product that has outstanding market fit. Your prospects love it and are raring to buy. Amazing. But before they can hit approve on the order, they need to make sure you’re SOC 2 or ISO 27001 compliant because their compliance officer won’t let them work with any vendor that hasn’t passed their audit. This is the joy of selling to regulated customers — which today, let’s be honest, is almost everyone.
Read Post
apono

6 Data Governance Principles You Need to Know

Feb 19, 2026 By The Apono Team In Apono
At some point, something bad always happens. Incidents like NHI sprawl and data ownership are always preventable. A supply chain attack finds its way either through upstream infiltration or downstream delivery. However, despite being aware of this, the problem persists. 54% of large organizations see supply chain challenges as a barrier to cyber resilience. There is complexity and interdependency among different systems, software, and teams that require access to one another.
Read Post
1Password

Expanding programmatic access to 1Password

Feb 19, 2026 By Francine Boulanger In 1Password
The era of secrets living in fixed systems and accessed through a handful of workflows is long gone. Modern development is faster, more automated, and increasingly AI-assisted. Developers need access to secrets everywhere their code runs – across CI/CD pipelines, local environments, and AI-driven workflows.
Read Post
safebreach

SafeBreach's Evolution into an AI-First Development Team: Part I

Feb 19, 2026 By Yossi Attas In SafeBreach
In this first installment of a series on the transformation of SafeBreach’s development organization, VP of Development Yossi Attas outlines how his team is managing the strategic shift toward an AI-First development methodology. This includes moving beyond simple tool adoption to a fundamental redefinition of the software engineer’s role. Read on as we explore.
Read Post
safebreach

EventLog-in: Propagating With Weak Credentials Using the Eventlog Service in Microsoft Windows (CVE-2025-29969)

Feb 19, 2026 By SafeBreach In SafeBreach
While attackers often find low-privileged credentials after creating a process dump of LSASS or harvesting hashes with a tool like Responder, they are rarely able to do anything with those credentials (RDP aside). We set out to discover how malicious actors might exploit Microsoft Windows remote procedure call (RPC) protocols to gather data remotely as a low-privileged user using RPC as an attack surface.
Read Post
sentrium

Disclosure: XWiki CSS Injection (CVE-2026-26000)

Feb 19, 2026 By Tom Keech In Sentrium
During independent security research, a CSS injection vulnerability (CVE-2026-26000) was identified in the XWiki platform. XWiki is an open-source enterprise wiki and collaboration platform commonly used for internal documentation and knowledge management. According to XWiki, the platform has over 8,000 active installations and is used by organisations such as Lenovo and Amazon, meaning vulnerabilities can affect a large and diverse user base.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.