Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

exabeam

Security Was Built for Humans. The Enterprise No Longer Runs on Humans Alone.

Oct 21, 2026 By Exabeam In Exabeam
Cybersecurity has spent decades learning how to distinguish trusted users from attackers. The agentic enterprise complicates that model. An AI agent can be trusted, authenticated, authorized, and functioning as designed, yet still produce an unintended or risky outcome through a sequence of otherwise legitimate actions. That scenario does not require a malicious agent.
Read Post
protecto

PII redaction vs. PII classification: why finding sensitive data is not enough

Oct 21, 2026 By Amar Kanagaraj In Protecto
PII redaction and PII classification get used as if they were the same operation. They are not. PII redaction removes or replaces a value that a system has flagged as sensitive. Classification names what that value actually is, so a policy engine can select a rule for it. In an AI pipeline, the second step is the one that decides whether a policy can run at all. Short answer. PII redaction removes or masks a value a system has flagged as sensitive.
Read Post

Rubrik MSP Unscripted - Episode 8, Part Two - Featuring Heejae Chae

Oct 21, 2026 By Rubrik In Rubrik
In this episode of MSP Unscripted, we sit down with Heejae Chae from SysGroup to explore the evolving managed services landscape and what it takes for MSPs to stay competitive in a rapidly changing market. We discuss the growing importance of cyber resilience, the shift from traditional IT services toward outcome-driven managed offerings, and how MSPs can differentiate themselves by delivering meaningful business value to customers.
View Video

Rubrik MSP Unscripted - Episode 8, Part One - Featuring Heejae Chae

Oct 21, 2026 By Rubrik In Rubrik
In this episode of MSP Unscripted, we sit down with Heejae Chae from SysGroup to explore the evolving managed services landscape and what it takes for MSPs to stay competitive in a rapidly changing market. We discuss the growing importance of cyber resilience, the shift from traditional IT services toward outcome-driven managed offerings, and how MSPs can differentiate themselves by delivering meaningful business value to customers.
View Video

CRA vs NIS2: Does Your Business Need to Comply With Both?

Oct 21, 2026 By VISTA InfoSec In VISTA InfoSec
CRA vs NIS2: Which EU cybersecurity regulation applies to your business? Could your company face obligations under the Cyber Resilience Act, NIS2 Directive, or both? If your organisation develops software, manufactures connected products, or operates in a regulated European sector, understanding the difference between CRA and NIS2 is essential for identifying your cybersecurity compliance responsibilities.
View Video

Bitsight MCP and Agentic AI Workflows: A Practical 90-Day Guide

Oct 21, 2026 By Bitsight In BitSight
How can security teams put agentic AI to work with trusted cyber risk intelligence? Discover how Bitsight MCP and Bitsight AI Mode help teams investigate cyber exposure, prioritize vulnerabilities, assess third-party risk, and automate security workflows. In this 45-minute webinar, Bitsight experts Christina Chehade and Tadd Hopkins demonstrate practical ways to bring AI into cybersecurity operations, from natural-language investigations to repeatable agentic workflows. You'll also get a 30/60/90-day roadmap for moving from initial exploration to scalable automation.
View Video
kovrr

The Best AI Vendor Risk Management Tools in 2026

Oct 21, 2026 By Kovrr In Kovrr
Conventional vendor risk tooling asks whether a supplier will suffer a breach. For an AI provider that question is necessary and incomplete, because the larger exposure is what the provider does with your material while operating exactly as intended. ‍ Retention periods, training use, inference location and the model serving an endpoint are data governance questions rather than security ones. Most platforms in this market have no field for them, which is the first thing to check. ‍
Read Post
kovrr

Cyber Risk Quantification Vendor Evaluation Checklist

Oct 21, 2026 By Kovrr In Kovrr
Buying a cyber risk quantification platform means asking a vendor to defend numbers that will end up in front of a board, an auditor, or a regulator. Most evaluation calls never press that hard. The questions below are the ones that separate platforms from each other, and they are written so that any vendor can answer them, including vendors who would beat Kovrr on several of the answers.
Read Post
sophos

Web App Owners - You're on Notice. Your Low-Hanging Fruit Just Got Lower

Oct 21, 2026 By Chris Ahearn In Sophos
Recent incident response investigations reveal how AI-assisted attackers are chaining web application vulnerabilities, credential theft, privilege escalation, and lateral movement into autonomous intrusion workflows. This article is part of an ongoing series from Sophos frontline security operations specialists, sharing the expertise they use to strengthen our industry-leading Managed Detection and Response (MDR) service and defend customers against evolving AI-era threats.
Read Post
sophos

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

Oct 21, 2026 By Sophos Counter Threat Unit Research Team In Sophos
In response to requests, this update consolidates the Sophos countermeasures that relate the PHP2Shelll vulnerabilities. SophosLabs has developed the following countermeasures to specifically detect activity associated with this threat. The next table lists additional pre-existing Sophos countermeasures that will likely address post-exploitation activity associated with these vulnerabilities.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.