Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Prompted to Fail: The Security Risks Lurking in DeepSeek-Generated Code

Nov 20, 2025 By CrowdStrike In CrowdStrike
CrowdStrike research into AI coding assistants reveals a new, subtle vulnerability surface: When DeepSeek-R1 receives prompts the Chinese Communist Party (CCP) likely considers politically sensitive, the likelihood of it producing code with severe security flaws increases by up to 50%. Stefan Stein, manager of the CrowdStrike Counter Adversary Operations Data Science team, joined Adam and Cristian for a live recording at Fal.Con 2025 to discuss how this project got started, the methodology behind the team’s research, and the significance of their findings.
View Video
tripwire

The Hidden Cost of Oversharing: How Your Social Posts Fuel Doxxing Campaigns

Nov 20, 2025 By Kirsten Doyle In Tripwire
Many don’t question what they share online. Others think, what could possibly happen? The answer: “plenty.” We all leave traces. A birthday photo here, a check-in there, a proud post about a promotion. None of it seems dangerous on its own, but online, fragments add up. Each click, tag, or comment starts to paint a fuller picture: one more detailed than most of us know, or would like.
Read Post
upguard

Attack Surface Discovery: A Quick Overview

Nov 20, 2025 By Revashni Moodley In UpGuard
Hybrid clouds, rapid development, and Shadow IT have expanded the modern attack surface, making complete visibility both crucial and more difficult than ever. Attack surface discovery offers a means of addressing these visibility gaps by continuously mapping all digital assets — internal, external, and hidden. This guide covers the fundamentals, best practices, and top tools for effectively discovering the attack surface.
Read Post
fireblocks

Stress-Tested and Validated: How Fireblocks and Solana Handled Crypto's Largest Liquidation Event

Nov 20, 2025 By Fireblocks In Fireblocks
On October 10, 2025, crypto markets experienced their largest liquidation event in history. A whopping $19.5 billion was liquidated across all markets with approximately $1 trillion in total market cap wiped out. Binance halted trading. Ethereum Layer 2s lagged. Arbitrum fees spiked above $500, with median fees jumping to $116. The entire ecosystem was under unprecedented stress. This was the ultimate real-world test of mission-critical infrastructure.
Read Post
apono

When the Internet Blinks: What Cloudflare's Outage Teaches Us About Standing Privileges

Nov 20, 2025 By Gabriel Avner In Apono
If you were online yesterday, you probably noticed that a surprising amount of the internet simply wasn’t there. Uber, X, Canva, ChatGPT, and dozens of others all began returning internal server errors. For a few hours, it looked like the web had taken the afternoon off. As usual, the immediate assumption was that someone must be attacking the internet. Even Cloudflare initially suspected a large-scale DDoS event. When many unrelated services break at once, it often signals malicious activity.
Read Post
foresiet

FortiWeb CVE-2025-58034: Exploited Zero-Day Command Injection in WAF

Nov 20, 2025 By Foresiet In Foresiet
Dissecting the active-in-the-wild OS command injection vulnerability and its implications for enterprise threat monitoring In November 2025, threat intelligence teams began warning of a newly discovered zero-day vulnerability in a widely-deployed web application firewall appliance. The vulnerability — CVE-2025-58034 — allows authenticated attackers to execute arbitrary OS commands via crafted HTTP requests or CLI commands.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.