Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

kroll

Beyond Compliance: Building an AI Operating Model Using Global Governance Frameworks

Oct 26, 2026 By Kroll In Kroll
By Rob Horne and Parul Dahl, Kroll Cyber Risk EMEA Security Advisory Kroll recently published a series of articles examining governance challenges associated with specific AI implementations, particularly agentic AI and the data, risk and compliance considerations that accompany autonomous decision-making. However, many organizations are now facing a broader challenge.
Read Post
Zenity

Shadow AI: When Approved Experiments Create New Shadows

Oct 26, 2026 By Yonatan Michaeli In Zenity
An AI innovation team is asked to build a customer support assistant in two weeks. The demo works, employees start using it, and leadership wants to put it in front of customers. Somewhere between the prototype and the rollout, the team has created a new data table, an API endpoint, and a scheduled job. The project has a sponsor. Does every piece across the customer support assistant have an owner?
Read Post
keeper

Keeper Security Recognized in 2026 Gartner Magic Quadrant for Privileged Access Management

Oct 26, 2026 By Anne Cutler In Keeper
Keeper Security, the leading zero-trust and zero-knowledge identity security platform, today announces that it has been recognized in the 2026 Gartner Magic Quadrant for Privileged Access Management (PAM) for a second consecutive year. The Gartner report evaluates vendors across their Ability to Execute and Completeness of Vision.
Read Post
astra

10 Skills Every Modern CISO Needs Beyond Technical Expertise

Oct 26, 2026 By Priya In Astra
CISOs are hired for their technical depth and then judged on everything else: can they get a budget approved? Can they calm an executive team at 2 a.m. while the incident is still unfolding? Can they convince a product lead to delay a launch without making an enemy? Almost no one is trained for this second job, and yet, it’s the one that decides whether a security program succeeds. This article will highlight ten crucial Chief Information Security Officer (CISO) skills.
Read Post
certkit

Fixing distrusted InCommon certificates with ERR_CERT_AUTHORITY_INVALID

Oct 26, 2026 By Todd H. Gardner In CertKit
Starting Tuesday, October 27, a lot of university websites will open in Chrome to this. Chrome is distrusting a root certificate, emSign ECC Root CA - G3, after eMudhra generated CA keys as small as 4. Every InCommon certificate issued from eMudhra’s ECC chain since April chains to that root.
Read Post
gitguardian

OWASP Top 10 Kubernetes Security Risks Explained: Why Credentials Deserve a Closer Look

Oct 26, 2026 By Dwayne McDaniel In GitGuardian
GitGuardian researchers reached 44 active Kubernetes clusters through leaked secrets, and 30% had been exposed for more than two years. Here’s how the OWASP Kubernetes Top 10 explains these Kubernetes security risks, and why K03, Secrets Management Failures, turns one leak into a chain.
Read Post
Snyk

PHP Patches Two Critical Unauthenticated RCEs (CVE-2026-109618, CVE-2026-109619): [Updated for CVE-2026-115560]

Oct 26, 2026 By Snyk Security Research In Snyk
On Wednesday, October 21, 2026 at 14:00 UTC, the PHP project released PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities, both rated CVSS v4.0 9.2, that can allow unauthenticated remote code execution. The PHP security team advises: "There are no complete mitigations; updating is the only safe choice." These are bugs in the PHP runtime, not in a Composer package.
Read Post
one identity

One Identity Named a Challenger in the 2026 Gartner Magic Quadrant for Privileged Access Management

Oct 26, 2026 By Megan Pennie In One Identity
At One Identity, we are proud to share that Gartner has recognized us as a Challenger in the 2026 Gartner Magic Quadrant for Privileged Access Management (PAM). We believe our Challenger placement is a recognition that reflects how well we execute: we are delighting the customers we serve, retaining them over the long term, and building a position that is well suited for what comes next.
Read Post
knowbe4

[Cybersecurity Awareness Month] Why Your Best Incident Reporting Tool Is Behavioral, Not Software

Oct 26, 2026 By Javvad Malik In KnowBe4
During an incident, the most valuable intel is from people on the ground. Security teams rely on their colleagues across the organization to report issues quickly and without trying to fix things themselves. However, many don’t report odd emails, strange pop-ups or the USB stick they found in the car park. This can be due to embarrassment, fear of getting into trouble or not wanting to be the one who cried wolf.
Read Post

Explaining PHP2Shell | Arctic Wolf Threat Brief

Oct 26, 2026 By Arctic Wolf Networks In Arctic Wolf
In this explainer from Arctic Wolf's Peter Ingebrigtsen, we break down what the PHP2Shell vulnerabilities are, how attackers are exploiting them, and the steps organizations should take now to reduce exposure. Arctic Wolf customers can use Aurora Exposure Management to identify affected assets and prioritize remediation, while the Aurora Agentic SOC helps detect and respond to post-exploitation activity such as webshell deployment, unauthorized command execution, persistence, and lateral movement.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.