Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

bitsight

Bitsight Threat Intelligence Briefing: Top TTPs Leveraged by Threat Actors in 2025

Dec 22, 2025 By Emma Stevens In BitSight
As the global cyber threat landscape evolves, adversaries continue to refine and adapt their tactics. Bitsight threat intelligence indicates that there are several tactics, techniques, and procedures (TTPs) that are most commonly and consistently leveraged by threat actors. These attacks are not isolated; they’re systemic.
Read Post
appknox

How Appknox reporting and analytics make security data usable across teams

Dec 22, 2025 By Rucha Wele In Appknox
Security reporting only works when the right people can use it. Appknox reporting and analytics are designed to help security leaders, AppSec teams, and developers work from the same data—without translation layers or manual fixes—so teams can meet targets for report delivery and act faster.
Read Post
vista infosec

Expert Roundup -How to Prepare for AI Data Processing Under GDPR?

Dec 22, 2025 By Narendra Sahoo In VISTA InfoSec
As AI adoption accelerates across business functions, December’s expert roundup focuses on a question many organizations are now confronting in practice rather than theory: how should companies prepare for AI related data processing under GDPR. Unlike traditional automation, AI systems often rely on large, dynamic datasets, continuous learning, and opaque decision logic.
Read Post
protecto

Why Preserving Data Structure Matters in De-Identification APIs

Dec 22, 2025 By Amar Kanagaraj In Protecto
When it comes to data masking or de-identification, one often-overlooked detail is the importance of preserving the original data structure. While it might seem harmless to normalize extra spaces or convert unique newline characters into a standard format, these subtle changes can actually have a significant impact on downstream processing. Let’s explore why this matters, with a couple of concrete examples.
Read Post
protecto

The Hidden Costs of Building Your Own Data Masking tool

Dec 22, 2025 By Anwita In Protecto
Building an in-house data masking tool often starts as a practical decision. The logic feels sound. Your team understands the data, knows the systems, and can tailor masking logic exactly to your needs. On the surface, it looks like a short engineering project that saves licensing costs and avoids external dependencies. What we’ve learned, after observing many organizations take this path, is that the hidden costs of building your own data masking solution rarely appear during the initial build.
Read Post
coralogix

Threat hunting with Olly

Dec 22, 2025 By Daniel Kerman In Coralogix
Effective threat hunting requires both comprehensive visibility and quick, data-driven insights. Olly, the AI-powered observability teammate within Coralogix, provides just that. Whether you’re tracking lateral movement, uncovering stealthy persistence, or correlating spikes in anomalous activity, Olly rapidly pinpoints the evidence and presents it in context so you can confirm or dismiss threats before they escalate.
Read Post
certkit

Do you still need wildcard certificates?

Dec 22, 2025 By Todd H. Gardner In CertKit
You’ve used wildcard certificates for years. It made your life easier. Once a year you’d renew your wildcard certificate, and copy it around to all the servers. It was way too complicated and expensive to get a unique certificate for every system. But now certificate lifetimes are shrinking to 47 days by 2029 and it’s not going to work anymore. You need to automate your certificates. Soon.
Read Post

AI Risk Governance Suite - office hours part 1

Dec 22, 2025 By Kovrr - Cyber Risk Quantification In Kovrr
Kovrr’s new AI Risk Governance Suite gives enterprises the visibility, structure, and measurable control needed to manage GenAI responsibly across its full lifecycle. Join us for Office Hours: Part 1, where Or Amir will walk through the first three modules of the suite—showing how enterprises can gain real-time oversight and quantifiable insight into their AI landscape: Discover how these capabilities help enterprises align innovation with accountability—building a defensible foundation for responsible GenAI adoption.
View Video
knowbe4

New BlackForce Phishing Kit Bypasses Multifactor Authentication

Dec 22, 2025 By KnowBe4 Team In KnowBe4
Zscaler has published a report on a new phishing kit dubbed “BlackForce” that uses Man-in-the-Browser (MitB) attacks to steal credentials and bypass multi-factor authentication. Notably, the kit “features a vetting system to qualify targets, after which a live operator takes over to orchestrate a guided compromise.” Additionally, the phishing kit uses mostly legitimate code in order to avoid detection by security scanners.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.