Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

LimaCharlie

Logging Is Not Observability: The AI Security Gap MSSPs Can't Ignore

Apr 22, 2026 By Daniel Ballmer In LimaCharlie
Every MSSP is fielding the same question from clients right now:"Are we safe with AI?" Most are answering with some version of"yes, we're logging everything." In a recent Defender Fridays episode, Saurabh Shintre, Founder and CEO of Realm Labs drew a hard line between these two concepts."You can log prompt and response and this bare minimum you have to do.
Read Post

AI SecOps Worskhop Series: Accelerating Cloud Security Operations with Claude Code and LimaCharlie

Apr 22, 2026 By LimaCharlie In LimaCharlie
In this workshop we will show how to use Claude Code with LimaCharlie to accelerate cloud security operations. We will have Claude Code deploy agents, create detections and identify issues before they become incidents. This hands-on workshop is designed to demonstrate the transformative power of integrating Anthropic's Claude Code, with the versatile security platform, LimaCharlie. Our focus will be on leveraging the capabilities of Claude Code to significantly accelerate and streamline various aspects of cloud security operations, turning reactive tasks into proactive, automated workflows.
View Video
levelblue

Why MDR Providers with Proprietary Threat Intelligence Detect More

Apr 22, 2026 By LevelBlue In LevelBlue
Managed Detection and Response (MDR) has become a foundational component of modern security programs. As attack surfaces expand and adversaries move faster, organizations increasingly rely on external providers to monitor, detect, and respond to threats around the clock. But not all MDR is created equal. The difference isn’t just tooling, staffing, or service-level promises. It comes down to the quality - and ownership - of the threat intelligence that powers detection.
Read Post
salt security

You're Not Watching MCPs. Anthropic's Vulnerability Shows Why You Should Be.

Apr 22, 2026 By Roey Eliyahu In Salt Security
Last week, researchers at OX Security published findings that should stop every security leader in their tracks. They discovered a critical vulnerability baked directly into Anthropic's Model Context Protocol SDK, affecting every supported language: Python, TypeScript, Java, and Rust. The result: remote code execution on any system running a vulnerable MCP implementation, with direct access to sensitive user data, internal databases, API keys, and chat histories. Over 7,000 publicly accessible servers.
Read Post
vista infosec

Mapping DORA to ISO 27001 and SOC 2

Apr 22, 2026 By VISTA InfoSec In VISTA InfoSec
Rate this post Last Updated on April 22, 2026 by Narendra Sahoo For EU financial entities facing DORA compliance, the prospect of simultaneously managing ISO 27001 and SOC 2 can feel overwhelming. The reality is far more encouraging: these three frameworks share deep structural overlap, and organisations that approach them as an integrated compliance program — rather than separate projects — can reduce compliance duplication by 40–60%.
Read Post
sophos

Strengthening authentication with passkeys: A CISO playbook

Apr 22, 2026 By Ross McKerchar In Sophos
For decades, passwords have been the standard method for protecting access to systems and accounts. However, passwords can be compromised or stolen via tactics such as brute-force attacks, phishing attacks, and infostealer malware. The shift to multi-factor authentication (MFA) added another layer of security by requiring additional authentication to verify the user’s identity – some combination of something you know, own, or (in the case of biometrics) are.
Read Post
Feroot

Anthropic's Mythos and the New Reality of AI Cybersecurity Risk

Apr 22, 2026 By Feroot In Feroot
I was on ABC News recently discussing why banks are on alert as new AI systems like Anthropic’s Claude Mythos raise cybersecurity concerns. What struck me most is how quickly the conversation has shifted. This is no longer a hypothetical risk or something we are planning for in the future. Financial institutions and regulators are reacting in real time to what AI is already capable of doing. From my perspective, we are still underestimating how fast this is moving.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.